CVE-2026-17160: Vulnerabilities in IBM AIX and PowerVM VIOS
IBM AIX 7.2, and 7.3 and IBM PowerVM VIOS 4.1 could allow a remote attacker to execute arbitrary code due to an integer overflow during size computation.
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade
IBM PowerVM VIOS 4.1.0to a version that resolves this vulnerability.Fixed in 4.1.0.50Patch IJ5956508/14/2026 - Upgrade
Upgrade
IBM PowerVM VIOS 4.1.1to a version that resolves this vulnerability.Fixed in 4.1.1.30Patch IJ5956408/14/2026 - Upgrade
Upgrade
IBM PowerVM VIOS 4.1.2to a version that resolves this vulnerability.Fixed in 4.1.2.20Patch IJ5956308/14/2026 - Operational
Perform an LPAR reboot to complete the SP/FP update (explicitly required to complete the SP/FP update).
- Operational
For VIOS 4.1.0 and VIOS 4.1.1, complete the additional post-update steps to migrate to the latest Postgres15 after applying the 4.1.0.50 or 4.1.1.30 FPs.
- Operational
After applying VIOS 4.1.0.50, follow the post-update instructions located at IBM support node 7283819.
- Operational
After applying VIOS 4.1.1.30, follow the post-update instructions located at IBM support node 7283823.
Event History
Frequently Asked Questions
Is IBM PowerVM VIOS included in the affected software scope?
Yes. The affected software list includes IBM PowerVM VIOS as well as IBM AIX.