CVE-2026-16933: Power System Integer Overflow
IBM Power Systems Firmware FW1120.00, FW1110.00 through FW1110.30, FW1060.00 through FW1060.80, FW950.00 through FW950.H2, OP940.00 through OP940.a1 (Power9), and OP940.00 through OP940.81 (Power HMC) is affected by a vulnerability in the interface between the BMC/FSP and the host system. An attacker with service account or root access to the BMC/FSP can read and write arbitrary regions of host system memory, giving full control over the host system and all hosted partitions, resulting in a confidentiality, integrity, and availability impact.
Other sources
Power Systems Firmware is affected by a vulnerability in the interface between the BMC/FSP and the host system. An attacker with service account or root access to the BMC/FSP can read and write arbitrary regions of host system memory, giving full control over the host system and all hosted partitions, resulting in a confidentiality, integrity, and availability impact.
— IBM
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade
IBM Power Hardware Management Console (BMC/FSP)to a version that resolves this vulnerability.Fixed in FW1060.81(1060_184) - Upgrade
Upgrade
IBM Power Hardware Management Console (BMC/FSP)to a version that resolves this vulnerability.Fixed in FW1110.31(1110_134) - Upgrade
Upgrade
IBM Power Hardware Management Console (BMC/FSP)to a version that resolves this vulnerability.Fixed in FW1120.01(1120_167) - Upgrade
Upgrade
IBM Power Hardware Management Console (BMC/FSP)to a version that resolves this vulnerability.Fixed in FW1110.31(1110_155) - Upgrade
Upgrade
IBM Power Hardware Management Console (BMC/FSP)to a version that resolves this vulnerability.Fixed in FW1120.01(1120_190) - Upgrade
Upgrade
IBM Power Hardware Management Console (BMC/FSP)to a version that resolves this vulnerability.Fixed in FW950.H3(950_230) - Upgrade
Upgrade
IBM Power Hardware Management Console (BMC/FSP)to a version that resolves this vulnerability.Fixed in OP940.82 - Upgrade
Upgrade
IBM Power Hardware Management Console (BMC/FSP)to a version that resolves this vulnerability.Fixed in OP940.a2 - Upgrade
Upgrade
IBM Power Hardware Management Console (BMC/FSP)to a version that resolves this vulnerability.Fixed in FW1060.81(1060_191)
Event History
Frequently Asked Questions
Who is realistically exposed to this issue?
IBM Power Systems using the listed affected firmware levels are exposed if an attacker can obtain a service account or root access to the BMC/FSP. The impact extends beyond the management controller to the host system and all hosted partitions.
What level of access does an attacker need to exploit it?
The attacker needs service-account or root-level access to the BMC/FSP. The provided information does not indicate that an unauthenticated or low-privileged attacker can exploit the issue.
What could an attacker do after exploiting this vulnerability?
An attacker can read and write arbitrary regions of host system memory. This can provide full control of the host system and every hosted partition, with confidentiality, integrity, and availability impact.