CVE-2026-17425: Vulnerabilities in IBM AIX and PowerVM VIOS

Affected Software

Remediation

Recommended actions to resolve this vulnerability, in priority order.

1. Upgrade

   Upgrade AIX 7.2 to a version that resolves this vulnerability.

   Patch SP13key_w_apar
2. Upgrade

   Upgrade AIX 7.3 TL02 to a version that resolves this vulnerability.

   Patch SP05key_w_apar
3. Upgrade

   Upgrade PowerVM VIOS 4.1.0 to a version that resolves this vulnerability.

   Fixed in 4.1.0.50Patch key_w_apar7.3.2IJ5956508/14/2026SP05key_w_apar
4. Upgrade

   Upgrade PowerVM VIOS 4.1.1 to a version that resolves this vulnerability.

   Fixed in 4.1.1.30Patch key_w_apar7.3.3IJ5956408/14/2026SP03key_w_apar
5. Upgrade

   Upgrade PowerVM VIOS 4.1.2 to a version that resolves this vulnerability.

   Fixed in 4.1.2.20Patch key_w_apar7.3.4IJ59563
6. Operational

   For the SP/FP update, an LPAR reboot is required to complete the SP/FP update.

7. Operational

   For VIOS 4.1.0 and VIOS 4.1.1, perform the additional steps required to migrate to the latest Postgres15 after applying the 4.1.1.30 or 4.1.0.50 FPs.

8. Operational

   If applying AIX/VIOS patches using nimsh secure, take the special steps required because the protocol between master and client is updated to be more secure.

9. Operational

   On AIX, Live Update can be used to avoid a reboot.

Event History

Parent advisories

This vulnerability appears in the following advisories.

• IBM-7283858

Frequently Asked Questions