CVE-2026-17097
6.7 MoyenneDescription
IBM PowerVM Hypervisor FW1120.00, FW1110.00 through FW1110.30, FW1060.00 through FW1060.80, and FW950.00 through FW950.H2 is affected by a vulnerability in the PowerVM hypervisor call interface. An attacker with root access to a guest partition can issue a specially crafted hypervisor call causing a virtual processor to become permanently unresponsive, requiring a full platform re-IPL to restore normal operation. In some cases this may also cause the guest to inject a small amount of data into hypervisor or partition memory with no attacker control over the target location. Successful exploitation results in an integrity and availability impact to the managed system.
Produits concernés
- IBM PowerVM Hypervisor
- Ibm power system s1122 \(9824-22a\) firmware
- Ibm power system s1124 \(9824-42a\) firmware
- Ibm power system s1122s \(9824-22b\) firmware
- Ibm power system s1114 \(9824-41b\) firmware
- Ibm power system l1122 \(9856-22h\) firmware
- Ibm power system l1124 \(9856-42h\) firmware
- Ibm power system e1150 \(9043-mru\) firmware
- Ibm power system s1112 \(9242-21b\) firmware
- Ibm power system s1112 \(9242-21t\) firmware
- Ibm power system e1080 \(9080-hex\) firmware
- Ibm power system s1022 \(9105-22a\) firmware
- Ibm power system s1024 \(9105-42a\) firmware
- Ibm power system s1022s \(9105-22b\) firmware
- Ibm power system s1014 \(9105-41b\) firmware
- Ibm power system l1022 \(9786-22h\) firmware
- Ibm power system l1024 \(9786-42h\) firmware
- Ibm power system e1050 \(9043-mrx\) firmware
- Ibm power system s1012 \(9028-21b\) firmware
- Ibm power system e1180 \(9080-heu\) firmware
- Ibm power system s922 \(9009-22g\) firmware
- Ibm power system h922 \(9223-22s\) firmware
- Ibm power system s914 \(9009-41g\) firmware
- Ibm power system s924 \(9009-42g\) firmware
- Ibm power system h924 \(9223-42s\) firmware
Scores CVSS
| Version | Score | Source | Vecteur |
|---|---|---|---|
| 3.1 | 7.3 Élevée | psirt@us.ibm.com | CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:N/I:L/A:H |
| 3.1 | 6.7 Moyenne | nvd@nist.gov (NVD) | CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:C/C:N/I:L/A:H |
Faiblesses (CWE)
Références
- https://www.ibm.com/support/pages/node/7283231 Vendor Advisory