CVE-2026-17429: Power System Incorrect Authorization
IBM Power Firmware FW1120.00, FW1110.00 through FW1110.30, FW1060.00 through FW1060.80, FW950.00 through FW950.H2, OP940.00 through OP940.a1 (Power9), and OP940.00 - OP940.81 (Power HMC) is affected by a vulnerability in the interface between the BMC/FSP and the host system. An attacker with service account or root access to the BMC/FSP can write arbitrary data to hardware control registers, allowing full control over the host system and all hosted partitions, resulting in a confidentiality, integrity, and availability impact.
Other sources
Power Systems Firmware is affected by a vulnerability in the interface between the BMC/FSP and the host system. An attacker with service account or root access to the BMC/FSP can write arbitrary data to hardware control registers, allowing full control over the host system and all hosted partitions, resulting in a confidentiality, integrity, and availability impact.
— IBM
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade
IBM Power Hardware Management Console (7063-CR2)to a version that resolves this vulnerability.Fixed in FW1060.81(1060_184)Patch FW1060.81(1060_184) - Upgrade
Upgrade
IBM Power System AC922 (8335-GTH, 8335-GTX)to a version that resolves this vulnerability.Fixed in FW1110.31(1110_134)Patch FW1110.31(1110_134) - Upgrade
Upgrade
IBM Power System E1050 (9043-MRX)to a version that resolves this vulnerability.Fixed in FW1110.31(1110_155)Patch FW1110.31(1110_155) - Upgrade
Upgrade
IBM Power System E1080 (9080-HEX)to a version that resolves this vulnerability.Fixed in FW1120.01(1120_190)Patch FW1120.01(1120_190) - Upgrade
Upgrade
IBM Power System E1150 (9043-MRU)to a version that resolves this vulnerability.Fixed in FW1120.01(1120_190)Patch FW1120.01(1120_190) - Upgrade
Upgrade
IBM Power System E1180 (9080-HEU)to a version that resolves this vulnerability.Fixed in FW1120.01(1120_190)Patch FW1120.01(1120_190) - Upgrade
Upgrade
IBM Power System E950 (9040-MR9)to a version that resolves this vulnerability.Fixed in FW950.H3(950_230)Patch FW950.H3(950_230) - Upgrade
Upgrade
IBM Power System E980 (9080-M9S)to a version that resolves this vulnerability.Fixed in OP940.82Patch OP940.82 - Upgrade
Upgrade
IBM Power System H922 (9223-22S)to a version that resolves this vulnerability.Fixed in OP940.a2Patch OP940.a2 - Upgrade
Upgrade
IBM Power System H924 (9223-42S)to a version that resolves this vulnerability.Fixed in FW1060.81(1060_191)Patch FW1060.81(1060_191) - Upgrade
Upgrade
IBM Power System L1022 (9786-22H)to a version that resolves this vulnerability.Fixed in FW1060.81(1060_191)Patch FW1060.81(1060_191) - Upgrade
Upgrade
IBM Power System L1024 (9786-42H)to a version that resolves this vulnerability.Fixed in FW1060.81(1060_191)Patch FW1060.81(1060_191) - Upgrade
Upgrade
IBM Power System L1122 (9856-22H)to a version that resolves this vulnerability.Fixed in FW1060.81(1060_191)Patch FW1060.81(1060_191) - Upgrade
Upgrade
IBM Power System L1124 (9856-42H)to a version that resolves this vulnerability.Fixed in FW1060.81(1060_191)Patch FW1060.81(1060_191) - Upgrade
Upgrade
IBM Power System S1012 (9028-21B)to a version that resolves this vulnerability.Fixed in FW1060.81(1060_191)Patch FW1060.81(1060_191) - Upgrade
Upgrade
IBM Power System S1014 (9105-41B)to a version that resolves this vulnerability.Fixed in FW1060.81(1060_191)Patch FW1060.81(1060_191) - Upgrade
Upgrade
IBM Power System S1022 (9105-22A)to a version that resolves this vulnerability.Fixed in FW1060.81(1060_191)Patch FW1060.81(1060_191) - Upgrade
Upgrade
IBM Power System S1022s (9105-22B)to a version that resolves this vulnerability.Fixed in FW1060.81(1060_191)Patch FW1060.81(1060_191) - Upgrade
Upgrade
IBM Power System S1024 (9105-42A)to a version that resolves this vulnerability.Fixed in FW1060.81(1060_191)Patch FW1060.81(1060_191) - Upgrade
Upgrade
IBM Power System S1112 (9242-21B, 9242-21T)to a version that resolves this vulnerability.Fixed in FW1060.81(1060_191)Patch FW1060.81(1060_191) - Upgrade
Upgrade
IBM Power System S1114 (9824-41B)to a version that resolves this vulnerability.Fixed in FW1060.81(1060_191)Patch FW1060.81(1060_191) - Upgrade
Upgrade
IBM Power System S1122 (9824-22A)to a version that resolves this vulnerability.Fixed in FW1060.81(1060_191)Patch FW1060.81(1060_191) - Upgrade
Upgrade
IBM Power System S1122s (9824-22B)to a version that resolves this vulnerability.Fixed in FW1060.81(1060_191)Patch FW1060.81(1060_191) - Upgrade
Upgrade
IBM Power System S1124 (9824-42A)to a version that resolves this vulnerability.Fixed in FW1060.81(1060_191)Patch FW1060.81(1060_191) - Upgrade
Upgrade
IBM Power System S914 (9009-41G)to a version that resolves this vulnerability.Fixed in FW1060.81(1060_191)Patch FW1060.81(1060_191) - Upgrade
Upgrade
IBM Power System S922 (9009-22G)to a version that resolves this vulnerability.Fixed in FW1060.81(1060_191)Patch FW1060.81(1060_191) - Upgrade
Upgrade
IBM Power System S924 (9009-42G)to a version that resolves this vulnerability.Fixed in FW1060.81(1060_191)Patch FW1060.81(1060_191)
Event History
Frequently Asked Questions
What level of access is required to exploit this issue?
An attacker needs service account or root access to the BMC/FSP. The issue is locally exploitable and does not require user interaction.
What systems are exposed if the BMC/FSP is compromised?
A successful attacker can gain full control of the host system and all hosted partitions. This can affect confidentiality, integrity, and availability across the managed system.
Which firmware releases are identified as affected?
Affected releases include FW1120.00; FW1110.00 through FW1110.30; FW1060.00 through FW1060.80; FW950.00 through FW950.H2; OP940.00 through OP940.a1 for Power9; and OP940.00 through OP940.81 for Power HMC.