Skip to content
IBMCVE-2026-17503

IBM PowerVM Hypervisor: improper input validation

Medium5.1CVE-2026-17503 · Published Sep 24, 2026

IBM PowerVM Hypervisor FW1120.00 through FW1120.01, FW1110.00 through FW1110.31, FW1060.00 through FW1060.81, and FW950.00 through FW950.H3 is affected by a vulnerability in the partition firmware runtime boot configuration. An attacker with root access to a partition can maliciously alter partition nvram, causing the partition to fail to boot. This condition persists until operator intervention — deleting and recreating the partition configuration — to restore normal operation. Successful exploitation results in an integrity and availability impact.

IBM advisory

Affected versions

PackageAffectedFixed in
PowerVM Hypervisor
Product
>= FW1120.00, <= FW1120.01No fix yet
>= FW1110.00, <= FW1110.31No fix yet
>= FW1060.00, <= FW1060.81No fix yet
>= FW950.00, <= FW950.H3No fix yet
Details and references
CVSS 3.1
CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:N/I:L/A:H
Severity from
the vendor (its own CVE record or advisory)
Weakness
CWE-20

More IBM advisories

All IBM
Advisory
IBM DataStage on Cloud Pak for Data: remote code execution
High8.8Sep 24
IBM DataStage on Cloud Pak for Data: remote code execution
High8.8Sep 24
IBM DataStage on Cloud Pak for Data: path traversal
High7.1Sep 24
IBM DataStage on Cloud Pak for Data: remote code execution
High8.8Sep 24
IBM DataStage on Cloud Pak for Data: remote code execution
High8.8Sep 24
IBM DataStage on Cloud Pak for Data: remote code execution
High8.8Sep 24

Critical advisories by email

Wednesdays: the week’s critical and high advisories in the AI and data stack, with the fixed versions. Only in weeks that have some.

Double opt-in. Unsubscribe any time.