CVE-2026-17229: IBM i is Affected By Multiple Vulnerabilities in Host Servers
IBM i 7.6, 7.5, 7.4, and 7.3 could allow a remote attacker to cause a denial of service due to an infinite loop.
Other sources
IBM i could allow a remote attacker to cause a denial of service due to an infinite loop.
— IBM
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade
IBM i 7.6to a version that resolves this vulnerability.Fixed in 7.6Patch SJ10848 - Upgrade
Upgrade
IBM i 7.6to a version that resolves this vulnerability.Fixed in 7.6Patch SJ10899 - Upgrade
Upgrade
IBM i 7.6to a version that resolves this vulnerability.Fixed in 7.6Patch SJ11022 - Upgrade
Upgrade
IBM i 7.6to a version that resolves this vulnerability.Fixed in 7.6Patch SJ11101 - Upgrade
Upgrade
IBM i 7.6to a version that resolves this vulnerability.Fixed in 7.6Patch SJ11097 - Upgrade
Upgrade
IBM i 7.6to a version that resolves this vulnerability.Fixed in 7.6Patch SJ11098 - Upgrade
Upgrade
IBM i 7.6to a version that resolves this vulnerability.Fixed in 7.6Patch SJ11099 - Upgrade
Upgrade
IBM i 7.6to a version that resolves this vulnerability.Fixed in 7.6Patch SJ11100 - Upgrade
Upgrade
IBM i 7.5to a version that resolves this vulnerability.Fixed in 7.5Patch SJ11102 - Upgrade
Upgrade
IBM i 7.4to a version that resolves this vulnerability.Fixed in 7.4Patch SJ11103 - Upgrade
Upgrade
IBM i 7.3to a version that resolves this vulnerability.Fixed in 7.3Patch SJ11104
Event History
Frequently Asked Questions
What is the severity of CVE-2026-17229?
The severity of CVE-2026-17229 is rated high, with a score of 7.5.
What impact does CVE-2026-17229 have on IBM i systems?
CVE-2026-17229 can allow a remote attacker to cause a denial of service due to an infinite loop.
Which versions of IBM i are affected by CVE-2026-17229?
IBM i versions 7.6, 7.5, 7.4, and 7.3 are affected by CVE-2026-17229.
How can I mitigate the risk of CVE-2026-17229?
To mitigate the risk of CVE-2026-17229, ensure that you apply any available patches provided by IBM.
Is CVE-2026-17229 exploitable remotely?
Yes, CVE-2026-17229 is exploitable remotely as it allows for a denial of service attack from an external attacker.