CVE-2026-17413
mediumpriority · track · 0EPSS 0.001 · 1 %ileUSEPSS · scored 2026-10-27
IBM PowerVM Hypervisor FW1120.00 through FW1120.01, FW1110.00 through FW1110.31, FW1060.00 through FW1060.81, and FW950.00 through FW950.H3 is affected by a vulnerability in the RTAS firmware-to-OS interface. An attacker with administrator-level (root) access to a logical partition can send a specially crafted request to partition firmware, causing the partition to crash and become unavailable. Other partitions on the same managed system are not affected.
cvss
Technical severity, 0–10. One row per scoring source.
base score 0–10 · higher = more severe · hover a vector to decode
weaknesses
The CWE weakness classes this flaw belongs to.
affected products (34)
Products and version ranges known to be affected.
- ibm power system e1050 (9043-mrx) firmwarefw1060.00 → fw1060.82nvdUScpe:2.3:o:ibm:power_system_e1050_\(9043-mrx\)_firmware:*:*:*:*:*:*:*:*
- ibm power system e1080 (9080-hex) firmwarefw1060.00 → fw1060.82nvdUScpe:2.3:o:ibm:power_system_e1080_\(9080-hex\)_firmware:*:*:*:*:*:*:*:*
- ibm power system e1150 (9043-mru) firmwarefw1110.00 → fw1110.32nvdUScpe:2.3:o:ibm:power_system_e1150_\(9043-mru\)_firmware:*:*:*:*:*:*:*:*
- ibm power system e1150 (9043-mru) firmwarefw1120.00 → fw1120.02nvdUScpe:2.3:o:ibm:power_system_e1150_\(9043-mru\)_firmware:*:*:*:*:*:*:*:*
- ibm power system e1180 (9080-heu) firmwarefw1110.00 → fw1110.32nvdUScpe:2.3:o:ibm:power_system_e1180_\(9080-heu\)_firmware:*:*:*:*:*:*:*:*
- ibm power system e1180 (9080-heu) firmwarefw1120.00 → fw1120.02nvdUScpe:2.3:o:ibm:power_system_e1180_\(9080-heu\)_firmware:*:*:*:*:*:*:*:*
- ibm power system e950 (9040-mr9) firmwarefw950.00 → fw950.h4nvdUScpe:2.3:o:ibm:power_system_e950_\(9040-mr9\)_firmware:*:*:*:*:*:*:*:*
- ibm power system e980 (9080-m9s) firmwarefw950.00 → fw950.h4nvdUScpe:2.3:o:ibm:power_system_e980_\(9080-m9s\)_firmware:*:*:*:*:*:*:*:*
- ibm power system h922 (9223-22s) firmwarefw950.00 → fw950.h4nvdUScpe:2.3:o:ibm:power_system_h922_\(9223-22s\)_firmware:*:*:*:*:*:*:*:*
- ibm power system h924 (9223-42s) firmwarefw950.00 → fw950.h4nvdUScpe:2.3:o:ibm:power_system_h924_\(9223-42s\)_firmware:*:*:*:*:*:*:*:*
- ibm power system l1022 (9786-22h) firmwarefw1060.00 → fw1060.82nvdUScpe:2.3:o:ibm:power_system_l1022_\(9786-22h\)_firmware:*:*:*:*:*:*:*:*
- ibm power system l1024 (9786-42h) firmwarefw1060.00 → fw1060.82nvdUScpe:2.3:o:ibm:power_system_l1024_\(9786-42h\)_firmware:*:*:*:*:*:*:*:*
- ibm power system l1122 (9856-22h) firmwarefw1110.00 → fw1110.32nvdUScpe:2.3:o:ibm:power_system_l1122_\(9856-22h\)_firmware:*:*:*:*:*:*:*:*
- ibm power system l1122 (9856-22h) firmwarefw1120.00 → fw1120.02nvdUScpe:2.3:o:ibm:power_system_l1122_\(9856-22h\)_firmware:*:*:*:*:*:*:*:*
- ibm power system l1124 (9856-42h) firmwarefw1110.00 → fw1110.32nvdUScpe:2.3:o:ibm:power_system_l1124_\(9856-42h\)_firmware:*:*:*:*:*:*:*:*
- ibm power system l1124 (9856-42h) firmwarefw1120.00 → fw1120.02nvdUScpe:2.3:o:ibm:power_system_l1124_\(9856-42h\)_firmware:*:*:*:*:*:*:*:*
- ibm power system s1012 (9028-21b) firmwarefw1060.00 → fw1060.82nvdUScpe:2.3:o:ibm:power_system_s1012_\(9028-21b\)_firmware:*:*:*:*:*:*:*:*
- ibm power system s1014 (9105-41b) firmwarefw1060.00 → fw1060.82nvdUScpe:2.3:o:ibm:power_system_s1014_\(9105-41b\)_firmware:*:*:*:*:*:*:*:*
- ibm power system s1022 (9105-22a) firmwarefw1060.00 → fw1060.82nvdUScpe:2.3:o:ibm:power_system_s1022_\(9105-22a\)_firmware:*:*:*:*:*:*:*:*
- ibm power system s1022s (9105-22b) firmwarefw1060.00 → fw1060.82nvdUScpe:2.3:o:ibm:power_system_s1022s_\(9105-22b\)_firmware:*:*:*:*:*:*:*:*
sources
Which sources assert this record, and when.
references (1) nvd
External citations — patches, advisories, analysis.
- https://www.ibm.com/support/pages/node/7289124PatchVendor Advisory
Attackers weaponise vulnerabilities like this against internet-exposed services. See what is exposed on your perimeter with a free passive scan.
Free scan