CVE-2026-17504 — This Power System update is being released to address

CVE-2026-17504

This Power System update is being released to address PUBLISHED

Description (CNA)

IBM PowerVM Hypervisor FW1120.00 through FW1120.01, FW1110.00 through FW1110.31, FW1060.00 through FW1060.81, and FW950.00 through FW950.H3 is affected by a vulnerability in the partition firmware runtime. An attacker with root access to a partition can send a specially crafted request to the partition firmware runtime, causing it to crash with possible memory corruption.

Affected (CNA)

Vendor / product	Versions
IBM / PowerVM Hypervisor	affected FW1120.00 through FW1120.01; affected FW1110.00 through FW1110.31; affected FW1060.00 through FW1060.81; affected FW950.00 through FW950.H3

CWE

CWE-191

References

https://www.ibm.com/support/pages/node/7289130

ADP enrichment

CISA-ADP

No English description supplied.

No references supplied.