CVE-2026-4937 — Power System Insufficient Entropy

CVE-2026-4937

Power System Insufficient Entropy PUBLISHED

Description (CNA)

IBM PowerVM Hypervisor FW1110.00 through FW1110.20, FW1060.00 through FW1060.71, and FW950.00 through FW950.H2 could allow a local attacker with administrative privileges to decrypt encrypted data due to certain hypervisor calls utilizing less entropy than requested.

Affected (CNA)

Vendor / product	Versions
IBM / PowerVM Hypervisor	affected FW1110.00 through FW1110.20; affected FW1060.00 through FW1060.71; affected FW950.00 through FW950.H2

CWE

CWE-331

References

https://www.ibm.com/support/pages/node/7283900

ADP enrichment

CISA-ADP

No English description supplied.

No references supplied.