CVE-2026-19442: IBM AIX vulnerability

Q: Which systems are in scope for this issue?

The listed affected products are IBM AIX and IBM PowerVM VIOS. The flaw is in the AIX Virtual SCSI initiator driver and affects the client LPAR kernel.

Published Aug 15, 2026

Updated

AIX has a pointer validation flaw exists in the AIX Virtual SCSI (vSCSI) initiator driver. Successful exploitation may result in denial of service, privilege escalation, or full compromise of the client LPAR kernel.

Affected Software

3 affected components

IBM AIX<=7.2

IBM AIX<=7.3

IBM PowerVM VIOS<=4.1

Event History

Aug 15, 2026

CVE Published

via IBM·12:00 AM

Data Sourced

via IBM·12:00 AM

DescriptionAffected Software

Parent advisories

This vulnerability appears in the following advisories.

IBM-7283858

Frequently Asked Questions

Which systems are in scope for this issue?

The listed affected products are IBM AIX and IBM PowerVM VIOS. The flaw is in the AIX Virtual SCSI initiator driver and affects the client LPAR kernel.