CVE-2026-16924: IBM AIX vulnerability
Published Aug 15, 2026
·Updated
AIX could allow a remote attacker to cause a denial of service due to an improper calculation of a memory offset during IPsec decapsulation.
Affected Software
3 affected components
IBM AIX<=7.2
IBM AIX<=7.3
IBM PowerVM VIOS<=4.1
Event History
Aug 15, 2026
CVE Published
via IBM·12:00 AM
Data Sourced
via IBM·12:00 AM
DescriptionAffected Software
Frequently Asked Questions
1
What access would an attacker need to exploit this issue?
The issue is described as remotely exploitable during IPsec decapsulation, so an attacker would need to send traffic that reaches an affected system's IPsec decapsulation processing.
2
Which environments should be prioritized for review?
Review IBM AIX systems and IBM PowerVM VIOS environments that process IPsec traffic, since both products are listed as affected.
3
What is the known impact?
The reported impact is denial of service caused by an improper memory-offset calculation during IPsec decapsulation.