CVE-2026-17503: This Power System update is being released to address

Published Sep 23, 2026
·
Updated

IBM PowerVM Hypervisor FW1120.00 through FW1120.01, FW1110.00 through FW1110.31, FW1060.00 through FW1060.81, and FW950.00 through FW950.H3 is affected by a vulnerability in the partition firmware runtime boot configuration. An attacker with root access to a partition can maliciously alter partition nvram, causing the partition to fail to boot. This condition persists until operator intervention — deleting and recreating the partition configuration — to restore normal operation. Successful exploitation results in an integrity and availability impact.

Other sources

Power Systems Firmware is affected by a vulnerability in the partition firmware runtime boot configuration. An attacker with root access to a partition can maliciously alter partition nvram, causing the partition to fail to boot. This condition persists until operator intervention — deleting and recreating the partition configuration — to restore normal operation. Successful exploitation results in an integrity and availability impact.

— IBM

Affected Software

5 affected components
IBM PowerVM Hypervisor>=FW1120.00<=FW1120.01, >=FW1110.00<=FW1110.31, >=FW1060.00<=FW1060.81, >=FW950.00<=FW950.H3
IBM PowerVM Hypervisor<=FW1120.00 - FW1120.01
IBM PowerVM Hypervisor<=FW1110.00 - FW1110.31
IBM PowerVM Hypervisor<=FW1060.00 - FW1060.81
IBM PowerVM Hypervisor<=FW950.00 - FW950.H3

Remediation

Recommended actions to resolve this vulnerability, in priority order.

  1. Upgrade

    Upgrade IBM PowerVM Hypervisor to a version that resolves this vulnerability.

    Fixed in FW1060.82Patch 1060_189
  2. Upgrade

    Upgrade IBM PowerVM Hypervisor to a version that resolves this vulnerability.

    Fixed in FW1110.32Patch 1110_138
  3. Upgrade

    Upgrade IBM PowerVM Hypervisor to a version that resolves this vulnerability.

    Fixed in FW1120.02Patch 1120_171
  4. Upgrade

    Upgrade IBM PowerVM Hypervisor to a version that resolves this vulnerability.

    Fixed in FW1110.32Patch 1110_160
  5. Upgrade

    Upgrade IBM PowerVM Hypervisor to a version that resolves this vulnerability.

    Fixed in FW1120.02Patch 1120_195
  6. Upgrade

    Upgrade IBM PowerVM Hypervisor to a version that resolves this vulnerability.

    Fixed in FW950.H4Patch 950_236
  7. Operational

    Delete and recreate the partition configuration to restore normal operation when the condition persists.

Event History

Sep 23, 2026
CVE Published
via IBM·12:00 AM
Data Sourced
via IBM·12:00 AM
DescriptionAffected Software
Sep 24, 2026
CVE Published
via MITRE·02:06 PM
Data Sourced
via MITRE·02:06 PM
RemedyDescriptionSeverityWeakness
Data Sourced
via NVD·02:17 PM
DescriptionSeverityWeakness

Parent advisories

This vulnerability appears in the following advisories.

Frequently Asked Questions

1

Which systems are affected?

Affected IBM PowerVM Hypervisor firmware ranges are FW1120.00 through FW1120.01, FW1110.00 through FW1110.31, FW1060.00 through FW1060.81, and FW950.00 through FW950.H3.

2

What level of access does an attacker need?

An attacker needs root access to a partition. The issue is locally exploitable and does not require user interaction.

3

What is the practical impact of exploitation?

An attacker can maliciously alter partition NVRAM so that the affected partition fails to boot. The stated impacts are integrity loss and availability loss.

4

What can be done if the partition has already been made unbootable?

Operator intervention is required. Delete and recreate the partition configuration to restore normal operation.

Contact

SecAlerts Pty Ltd.
132 Wickham Terrace
Fortitude Valley,
QLD 4006, Australia
info@secalerts.co
By using SecAlerts services, you agree to our services end-user license agreement. This website is safeguarded by reCAPTCHA and governed by the Google Privacy Policy and Terms of Service. All names, logos, and brands of products are owned by their respective owners, and any usage of these names, logos, and brands for identification purposes only does not imply endorsement. If you possess any content that requires removal, please get in touch with us.
© 2026 SecAlerts Pty Ltd.
ABN: 70 645 966 203, ACN: 645 966 203