CVE-2026-17145: Vulnerabilities in IBM AIX and PowerVM VIOS

Affected Software

Remediation

Recommended actions to resolve this vulnerability, in priority order.

1. Upgrade

   Upgrade IBM AIX 7.2 to a version that resolves this vulnerability.

   Patch IJ5956608
2. Upgrade

   Upgrade IBM AIX 7.3 TL04 to a version that resolves this vulnerability.

   Patch IJ5956508
3. Upgrade

   Upgrade IBM AIX 7.3 TL03 to a version that resolves this vulnerability.

   Patch IJ5956408
4. Upgrade

   Upgrade IBM AIX 7.3 TL02 to a version that resolves this vulnerability.

   Patch IJ59563
5. Upgrade

   Upgrade IBM PowerVM VIOS 4.1.0 to a version that resolves this vulnerability.

   Fixed in 4.1.0.50Patch IJ5956508
6. Upgrade

   Upgrade IBM PowerVM VIOS 4.1.1 to a version that resolves this vulnerability.

   Fixed in 4.1.1.30Patch IJ5956408
7. Upgrade

   Upgrade IBM PowerVM VIOS 4.1.2 to a version that resolves this vulnerability.

   Fixed in 4.1.2.20Patch IJ5956308
8. Configuration

   For VIOS 4.1.0 and VIOS 4.1.1, perform the required migration to the latest Postgres15 after applying the specified VIOS FPs.

   IBM PowerVM VIOS Postgres15 migration after applying VIOS fixes = Migrate to the latest Postgres15 after applying VIOS 4.1.1.30 or VIOS 4.1.0.50 FPs (additional steps required).
9. Compensating control

   If using AIX nimsh secure to apply these patches, take the special steps described in the referenced guidance because the protocol between master and client is updated to be more secure.

10. Compensating control

    On AIX, use Live Update to avoid a reboot where possible (otherwise perform the required LPAR reboot to complete the SP/FP update).

11. Operational

    Reboot the LPAR to complete the SP/FP update (required after applying the AIX/VIOS SP/FP remediation levels).

Event History

Parent advisories

This vulnerability appears in the following advisories.

• IBM-7283858