CVE-2026-17165: Vulnerabilities in IBM AIX and PowerVM VIOS

Affected Software

Remediation

Recommended actions to resolve this vulnerability, in priority order.

1. Upgrade

   Upgrade IBM PowerVM VIOS to a version that resolves this vulnerability.

   Fixed in 4.1.0.50
2. Upgrade

   Upgrade IBM PowerVM VIOS to a version that resolves this vulnerability.

   Fixed in 4.1.1.30
3. Upgrade

   Upgrade IBM PowerVM VIOS to a version that resolves this vulnerability.

   Fixed in 4.1.2.20
4. Upgrade

   Upgrade IBM AIX 7.2 to a version that resolves this vulnerability.

   Patch IJ5956608
5. Upgrade

   Upgrade IBM AIX 7.3 to a version that resolves this vulnerability.

   Patch IJ5956508
6. Upgrade

   Upgrade IBM AIX 7.3 to a version that resolves this vulnerability.

   Patch IJ5956408
7. Upgrade

   Upgrade IBM AIX 7.3 to a version that resolves this vulnerability.

   Patch IJ59563
8. Compensating control

   When applying VIOS 4.1.0.50 or VIOS 4.1.1.30 FPs via nimsh secure, take the special steps noted in the instructions, as the protocol between master and client is updated to be more secure.

9. Compensating control

   On AIX, Live Update can be used to avoid a reboot (in addition to the required SP/FP update completion instructions).

10. Operational

    After applying the AIX service pack (SP) and/or VIOS fix pack (FP) updates, perform an LPAR reboot is required to complete the SP/FP update.

11. Operational

    Note for VIOS 4.1.0 and VIOS 4.1.1: additional steps are required to migrate to the latest Postgres15 after applying the 4.1.1.30 or 4.1.0.50 FPs.

Event History

Parent advisories

This vulnerability appears in the following advisories.

• IBM-7283858