CVE-2026-16851: Use After Free

Q: Which systems should be investigated for exposure?

Investigate systems running IBM AIX or IBM PowerVM VIOS. The provided data does not identify affected or fixed versions.

Q: What attacker access or prerequisites are specified?

The issue is described as remotely exploitable. The provided data does not state whether authentication, a particular service, or any additional configuration is required.

Q: Are temporary mitigations available if patching cannot happen immediately?

No workaround or mitigation is provided in the supplied data.

Published Aug 15, 2026

Updated

AIX could allow a remote attacker to cause a denial of service due to a use-after-free.

Affected Software

3 affected components

IBM AIX<=7.2

IBM AIX<=7.3

IBM PowerVM VIOS<=4.1

Event History

Aug 15, 2026

CVE Published

via IBM·12:00 AM

Data Sourced

via IBM·12:00 AM

DescriptionAffected Software

Parent advisories

This vulnerability appears in the following advisories.

IBM-7283858

Frequently Asked Questions

Which systems should be investigated for exposure?

Investigate systems running IBM AIX or IBM PowerVM VIOS. The provided data does not identify affected or fixed versions.

What attacker access or prerequisites are specified?

The issue is described as remotely exploitable. The provided data does not state whether authentication, a particular service, or any additional configuration is required.

Are temporary mitigations available if patching cannot happen immediately?