CVE-2026-17171: Vulnerabilities in IBM AIX and PowerVM VIOS

Affected Software

Remediation

Recommended actions to resolve this vulnerability, in priority order.

1. Upgrade

   Upgrade IBM AIX 7.3 TL04 to a version that resolves this vulnerability.

   Fixed in SP2
2. Upgrade

   Upgrade IBM AIX 7.3 TL03 to a version that resolves this vulnerability.

   Fixed in SP3
3. Upgrade

   Upgrade IBM AIX 7.3 TL02 to a version that resolves this vulnerability.

   Fixed in SP5
4. Upgrade

   Upgrade IBM AIX 7.2 TL05 to a version that resolves this vulnerability.

   Fixed in SP13
5. Upgrade

   Upgrade IBM PowerVM VIOS 4.1.0 to a version that resolves this vulnerability.

   Fixed in 4.1.0.50Patch IJ5956508/14/2026
6. Upgrade

   Upgrade IBM PowerVM VIOS 4.1.1 to a version that resolves this vulnerability.

   Fixed in 4.1.1.30Patch IJ5956408/14/2026
7. Upgrade

   Upgrade IBM PowerVM VIOS 4.1.2 to a version that resolves this vulnerability.

   Fixed in 4.1.2.20Patch IJ5956308/14/2026
8. Compensating control

   If using nimsh secure to apply the patches, follow the special steps because the protocol between master and client is updated to be more secure.

9. Compensating control

   On AIX, Live Update can be used to avoid a reboot.

10. Operational

    Reboot the LPAR to complete the SP/FP update.

11. Operational

    For VIOS 4.1.0 and VIOS 4.1.1, after applying the 4.1.0.50 or 4.1.1.30 FPs respectively, perform the additional steps required to migrate to the latest Postgres15.

Event History

Parent advisories

This vulnerability appears in the following advisories.

• IBM-7283858

Frequently Asked Questions