CVE-2023-30440: IBM PowerVM Hypervisor denial of service
IBM PowerVM Hypervisor could allow a local attacker with control a partition that has been assigned SRIOV virtual function (VF) to cause a denial of service to a peer partition or arbitrary data corruption.
Other sources
IBM PowerVM Hypervisor FW860.00 through FW860.B3, FW950.00 through FW950.70, FW1010.00 through FW1010.50, FW1020.00 through FW1020.30, and FW1030.00 through FW1030.10 could allow a local attacker with control a partition that has been assigned SRIOV virtual function (VF) to cause a denial of service to a peer partition or arbitrary data corruption. IBM X-Force ID: 253175.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2023-30440?
The severity of CVE-2023-30440 is considered high due to the potential for denial of service and arbitrary data corruption.
How do I fix CVE-2023-30440?
To fix CVE-2023-30440, upgrade IBM PowerVM Hypervisor to the latest version that is not affected, as detailed in IBM's support documentation.
What are the affected versions for CVE-2023-30440?
Affected versions for CVE-2023-30440 include IBM PowerVM Hypervisor FW860.00 through FW860.B3 and FW950.00 through FW950.70.
Who is impacted by CVE-2023-30440?
CVE-2023-30440 impacts local attackers who have control over a partition assigned SRIOV virtual function within vulnerable versions of IBM PowerVM Hypervisor.
What kind of attack does CVE-2023-30440 enable?
CVE-2023-30440 enables a local attacker to cause denial of service or arbitrary data corruption to peer partitions.