CVE-2025-36035: IBM PowerVM Hypervisor denial of service

Q: What is the severity of CVE-2025-36035?

CVE-2025-36035 has a high severity rating due to its potential to allow local privileged users to cause a denial of service.

Q: How do I fix CVE-2025-36035?

To mitigate CVE-2025-36035, it is recommended to update the IBM PowerVM Hypervisor to the latest firmware version provided by IBM.

Q: Which versions of IBM PowerVM Hypervisor are affected by CVE-2025-36035?

CVE-2025-36035 affects IBM PowerVM Hypervisor versions FW950.00 through FW950.E0, FW1050.00 through FW1050.50, and FW1060.00 through FW1060.40.

Q: What impact can CVE-2025-36035 have on systems?

CVE-2025-36035 can lead to a denial of service, potentially exposing memory contents or causing system instability.

Q: Who is primarily at risk with CVE-2025-36035?

Local privileged users of affected IBM PowerVM Hypervisor versions are primarily at risk with CVE-2025-36035.

Published Sep 12, 2025

Updated

IBM PowerVM Hypervisor FW950.00 through FW950.E0, FW1050.00 through FW1050.50, and FW1060.00 through FW1060.40 could allow a local privileged user to cause a denial of service by issuing a specially crafted IBM i hypervisor call that would disclose memory contents or consume excessive memory resources.

Other sources

The PowerVM hypervisor could allow a local privileged user to cause a denial of service by issuing a specially crafted IBMi hypervisor call that would disclose memory contents or consume excessive memory resources.

— IBM

Affected Software

31 affected components

IBM PowerVM Hypervisor>=FW950.00<=FW950.E0, >=FW1050.00<=FW1050.50, >=FW1060.00<=FW1060.40

IBM PowerVM Hypervisor<=FW1050.00 - FW1050.50

IBM PowerVM Hypervisor<=FW1060.00 - FW1060.40

IBM PowerVM Hypervisor<=FW950.00 - FW950.E0

All of the following

IBM PowerVM Hypervisor>=FW950.00<=FW950.E0

Any of the following

IBM Power System E950 \(9040-mr9\)

IBM Power System E980 \(9080-m9s\)

IBM Power System H922 \(9223-22h\)

IBM Power System H922 \(9223-22s\)

IBM Power System H924 \(\(9223-42s\)

IBM Power System H924 \(9223-42h\)

IBM Power System L922 \(9008-22l\)

IBM Power System S914 \(9009-41a\)

IBM Power System S914 \(9009-41g\)

IBM Power System S922 \(9009-22a\)

IBM Power System S922 \(9009-22g\)

IBM Power System S924 \(9009-42a\)

IBM Power System S924 \(9009-42g\)

All of the following

Any of the following

IBM PowerVM Hypervisor>=FW1050.00<=FW1050.50

IBM PowerVM Hypervisor>=FW1060.00<=FW1060.40

IBM Power System E1080 \(9080-hex\)

All of the following

Any of the following

IBM PowerVM Hypervisor>=FW1050.00<=FW1050.50

IBM PowerVM Hypervisor>=FW1060.00<=FW1060.40

Any of the following

IBM Power System E1050 \(9043-mrx\)

IBM Power System L1022 \(9786-22h\)

IBM Power System L1024 \(9786-42h\)

IBM Power System S1012 \(9028-21b\)

IBM Power System S1014 \(9105-41b\)

IBM Power System S1022 \(9105-22a\)

IBM Power System S1022s \(9105-22b\)

IBM Power System S1024 \(9105-42a\)

Remediation

Information

Customers with the products below should install 950.E1(950_182)/950.F0(950_192) or newer to remediate this vulnerability. Power 9 * IBM Power System L922 (9008-22L) * IBM Power System S922 (9009-22A, 9009-22G) * IBM Power System H922 (9223-22H, 9223-22S) * IBM Power System S914 (9009-41A, 9009-41G) * IBM Power System S924 (9009-42A, 9009-42G) * IBM Power System H924 (9223-42H, 9223-42S) * IBM Power System E950 (9040-MR9) * IBM Power System E980 (9080-M9S) Customers with the products below should install FW1050.51(1050_095)/FW1050.60(1050_090), FW1060.41(1060_120), or newer to remediate this vulnerability. Power 10 * IBM Power System E1080 (9080-HEX) Customers with the products below should install FW1050.51(1050_113)/FW1050.60(1050_108), FW1060.41(1060_120), or newer to remediate this vulnerability. Power 10 * IBM Power System S1022 (9105-22A) * IBM Power System S1024 (9105-42A) * IBM Power System S1022s (9105-22B) * IBM Power System S1014 (9105-41B) * IBM Power System L1022 (9786-22H) * IBM Power System L1024 (9786-42H) * IBM Power System E1050 (9043-MRX) * IBM Power System S1012 (9028-21B)

Event History

Sep 12, 2025

CVE Published

via IBM·12:00 AM

Data Sourced

via IBM·12:00 AM

DescriptionAffected Software

Sep 14, 2025

CVE Published

via MITRE·12:52 PM

Data Sourced

via MITRE·12:52 PM

RemedyDescriptionSeverityWeakness

Data Sourced

via NVD·01:15 PM

DescriptionSeverityWeaknessAffected Software

Parent advisories

This vulnerability appears in the following advisories.

IBM-7244813

Frequently Asked Questions

What is the severity of CVE-2025-36035?

CVE-2025-36035 has a high severity rating due to its potential to allow local privileged users to cause a denial of service.

How do I fix CVE-2025-36035?

To mitigate CVE-2025-36035, it is recommended to update the IBM PowerVM Hypervisor to the latest firmware version provided by IBM.

Which versions of IBM PowerVM Hypervisor are affected by CVE-2025-36035?

CVE-2025-36035 affects IBM PowerVM Hypervisor versions FW950.00 through FW950.E0, FW1050.00 through FW1050.50, and FW1060.00 through FW1060.40.

What impact can CVE-2025-36035 have on systems?

CVE-2025-36035 can lead to a denial of service, potentially exposing memory contents or causing system instability.

Who is primarily at risk with CVE-2025-36035?

Local privileged users of affected IBM PowerVM Hypervisor versions are primarily at risk with CVE-2025-36035.

CVE-2025-36035: IBM PowerVM Hypervisor denial of service

Other sources

Affected Software

Remediation

Information

Event History

Parent advisories

Don't miss critical vulnerabilities

Frequently Asked Questions

What is the severity of CVE-2025-36035?

How do I fix CVE-2025-36035?

Which versions of IBM PowerVM Hypervisor are affected by CVE-2025-36035?

What impact can CVE-2025-36035 have on systems?

Who is primarily at risk with CVE-2025-36035?

Company

Resources

Contact