[ CVE-2026-19492 · Published 24 Sep 2026 ]
Vulnerability in IBM PowerVM Hypervisor
CVSS 3.2
EPSS <1%Fix available
[ Description ]Official description
IBM PowerVM Hypervisor FW1120.00 through FW1120.01, FW1110.00 through FW1110.31, and FW1060.00 through FW1060.81 is affected by a vulnerability in a hypervisor call interface. An attacker with root access to a guest partition can read a limited amount of hypervisor memory, potentially exposing sensitive data belonging to the hypervisor or other guest partitions hosted on the same system, resulting in a confidentiality impact. The attacker has no control over which memory contents are returned. This vulnerability is of particular concern in multi-tenant environments where guests may run arbitrary OS images.
[ Fixes ]Fixes and patches
- Patch on ibm.comVendor patch or bulletin · NVD · Reference tagged 'Patch' by NVD
[ References ]References
- www.ibm.com/support/pages/node/7289137PatchVendor Advisory