AI and data stack advisories

Severe, 6 weeks1496Projects326

1496 severe, 6 weeks · 326 projects

IBMCVE-2026-19446

IBM AIX: resource exhaustion

IBM

CVE-2026-19446 · Published Aug 20, 2026 · updated Aug 25, 2026

High7.5
No fix yet
IBM advisory

IBM AIX 7.2, and 7.3 and IBM PowerVM VIOS 4.1 allows a remote unauthenticated attacker can send a crafted UDP packet to a reachable RPC service, resulting in complete system unavailability and requiring an LPAR restart.

Affected versions

PackageAffectedFixed in
AIX
Product
<= 7.2No fix yet
<= 7.3No fix yet
PowerVM VIOS
Product
<= 4.1No fix yet
Details and references
CVSS 3.1
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
Severity from
the vendor (its own CVE record or advisory)
Weakness
CWE-400

More IBM advisories

All IBM
High 8.2Aug 20IBM AIX: denial of serviceCVE-2026-19442no fix yetMedium 6.5Aug 20IBM AIX: memory corruptionCVE-2026-19448no fix yetHigh 8.8Aug 20IBM AIX: improper privilege managementCVE-2026-19449no fix yetMedium 6.7Aug 20IBM AIX: memory corruptionCVE-2026-19783no fix yetMedium 5.4Aug 20IBM AIX: denial of serviceCVE-2026-18828no fix yetHigh 8.8Aug 20IBM AIX: remote code executionCVE-2026-18832no fix yet