[ CVE-2026-19492 · Published 24 Sep 2026 ]

Vulnerability in IBM PowerVM Hypervisor

CVSS 3.2 EPSS <1%Fix available

[ Description ]Official description

IBM PowerVM Hypervisor FW1120.00 through FW1120.01, FW1110.00 through FW1110.31, and FW1060.00 through FW1060.81 is affected by a vulnerability in a hypervisor call interface. An attacker with root access to a guest partition can read a limited amount of hypervisor memory, potentially exposing sensitive data belonging to the hypervisor or other guest partitions hosted on the same system, resulting in a confidentiality impact. The attacker has no control over which memory contents are returned. This vulnerability is of particular concern in multi-tenant environments where guests may run arbitrary OS images.

[ Fixes ]Fixes and patches

  • Patch on ibm.comVendor patch or bulletin · NVD · Reference tagged 'Patch' by NVD

[ References ]References