What’s Vulnerable › Vulnerabilities

CVE-2026-17511: This Power System update is being released to address

Description

IBM PowerVM Hypervisor FW1120.00 through FW1120.01, FW1110.00 through FW1110.31, FW1060.00 through FW1060.81, and FW950.00 through FW950.H3 is affected by a vulnerability in the partition resource dump interface. An attacker with authenticated administrator-level access to the HMC or service processor can obtain a limited snapshot of partition processor state. Successful exploitation results in a confidentiality impact to the managed system.

Affected products

How to fix

Upgrade to a fixed version: IBM Power System E1050 (9043-Mrx) Firmware fw1060.82; IBM Power System E1080 (9080-Hex) Firmware fw1060.82; IBM Power System E1150 (9043-Mru) Firmware fw1110.32, fw1120.02; IBM Power System E1180 (9080-Heu) Firmware fw1110.32, fw1120.02; IBM Power System E950 (9040-Mr9) Firmware fw950.h4; IBM Power System E980 (9080-M9S) Firmware fw950.h4; IBM Power System H922 (9223-22S) Firmware fw950.h4; IBM Power System H924 (9223-42S) Firmware fw950.h4; IBM Power System L1022 (9786-22H) Firmware fw1060.82; IBM Power System L1024 (9786-42H) Firmware fw1060.82; IBM Power System L1122 (9856-22H) Firmware fw1110.32, fw1120.02; IBM Power System L1124 (9856-42H) Firmware fw1110.32, fw1120.02. Check the vendor advisory for mitigations.

References

Get alerted when CVE-2026-17511 or the next vulnerability affects your stack