CVE-2021-38917: Critical severity ibm powervm hypervisor firmware vulnerability
IBM PowerVM Hypervisor could allow an attacker that gains service access to the FSP can read and write arbitrary host system memory through a series of carefully crafted service procedures.
Other sources
IBM PowerVM Hypervisor FW860, FW940, and FW950 could allow an attacker that gains service access to the FSP can read and write arbitrary host system memory through a series of carefully crafted service procedures. IBM X-Force ID: 210018.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2021-38917?
CVE-2021-38917 has a high severity rating due to the potential for unauthorized memory access.
How do I fix CVE-2021-38917?
To fix CVE-2021-38917, upgrade to the latest version of IBM PowerVM Hypervisor.
What versions of IBM PowerVM Hypervisor are affected by CVE-2021-38917?
CVE-2021-38917 affects IBM PowerVM Hypervisor versions FW860, FW940, and FW950.
Who can exploit CVE-2021-38917?
CVE-2021-38917 can be exploited by attackers who gain service access to the Flexible Service Processor (FSP).
What type of attacks can CVE-2021-38917 facilitate?
CVE-2021-38917 can facilitate unauthorized reading and writing of arbitrary host system memory.