CVE-2026-19492: This Power System update is being released to address
IBM PowerVM Hypervisor FW1120.00 through FW1120.01, FW1110.00 through FW1110.31, and FW1060.00 through FW1060.81 is affected by a vulnerability in a hypervisor call interface. An attacker with root access to a guest partition can read a limited amount of hypervisor memory, potentially exposing sensitive data belonging to the hypervisor or other guest partitions hosted on the same system, resulting in a confidentiality impact. The attacker has no control over which memory contents are returned. This vulnerability is of particular concern in multi-tenant environments where guests may run arbitrary OS images.
Other sources
Power Systems Firmware is affected by a vulnerability in a hypervisor call interface. An attacker with root access to a guest partition can read a limited amount of hypervisor memory, potentially exposing sensitive data belonging to the hypervisor or other guest partitions hosted on the same system, resulting in a confidentiality impact. The attacker has no control over which memory contents are returned. This vulnerability is of particular concern in multi-tenant environments where guests may run arbitrary OS images.
— IBM
Affected Software
Remediation
Information
Patch Available
Event History
Frequently Asked Questions
Which environments are most exposed to this issue?
The issue is of particular concern on multi-tenant systems where guest partitions may run arbitrary operating system images. A compromised or malicious guest with root access could potentially expose limited hypervisor or other guest-partition memory.
What level of access does an attacker need?
An attacker needs root access within a guest partition. The attack is local and does not require user interaction.
What information could be exposed?
The attacker can read a limited amount of hypervisor memory, which may contain sensitive data from the hypervisor or other guest partitions on the same system. The attacker cannot control which memory contents are returned.
Which firmware levels are affected?
Affected IBM PowerVM Hypervisor firmware ranges are FW1120.00 through FW1120.01, FW1110.00 through FW1110.31, and FW1060.00 through FW1060.81.