CVE-2026-16724: Power System Integer Overflow
IBM Virtualization Management Interface FW1110.00 through FW1110.30, FW1120.00 through FW1120.00, and FW1060.00 through FW1060.80 is affected by a vulnerability in the Virtualization Management Interface (VMI). An attacker with authenticated administrator-level access can cause the VMI to crash. The VMI will restart automatically; however, repeated exploitation could result in a sustained availability impact.
Other sources
Power Systems Firmware is affected by a vulnerability in the Virtualization Management Interface (VMI). An attacker with authenticated administrator-level access can cause the VMI to crash. The VMI will restart automatically; however, repeated exploitation could result in a sustained availability impact.
— IBM
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade
IBM Virtualization Management Interface (VMI) firmwareto a version that resolves this vulnerability.Fixed in FW1060.81(1060_191) - Upgrade
Upgrade
IBM Virtualization Management Interface (VMI) firmwareto a version that resolves this vulnerability.Fixed in FW1110.31(1110_155) - Upgrade
Upgrade
IBM Virtualization Management Interface (VMI) firmwareto a version that resolves this vulnerability.Fixed in FW1120.01(1120_190) - Compensating control
If VMI is exploited repeatedly, it may cause sustained availability impact; monitor for repeated VMI crashes/availability issues during and after upgrade until patched firmware is confirmed.
Event History
Frequently Asked Questions
Who can exploit this issue?
Exploitation requires authenticated administrator-level access to the Virtualization Management Interface. The attack vector is adjacent network access, and no user interaction is required.
What is the operational impact of successful exploitation?
An attacker can crash the VMI. It restarts automatically, but repeated crashes can create a sustained availability impact.
Which firmware releases are affected?
Affected releases are FW1110.00 through FW1110.30, FW1120.00 through FW1120.00, and FW1060.00 through FW1060.80.