CVE-2026-19783: IBM AIX vulnerability

Q: Who can exploit this issue?

An attacker needs local access to an affected IBM AIX or IBM PowerVM VIOS system and must be able to cause the system to read a crafted filesystem image.

Q: What could successful exploitation cause?

The crafted image can trigger an out-of-bounds write on the kernel stack while directories are read. This can crash the system and may potentially allow privilege escalation.

Published Aug 15, 2026

Updated

IBM AIX could allow a local attacker to cause kernel memory corruption due to insufficient validation. A crafted filesystem image can trigger an out-of-bounds kernel-stack write during directory reads, causing a system crash or potentially enabling privilege escalation.

Affected Software

3 affected components

IBM AIX<=7.2

IBM AIX<=7.3

IBM PowerVM VIOS<=4.1

Event History

Aug 15, 2026

CVE Published

via IBM·12:00 AM

Data Sourced

via IBM·12:00 AM

DescriptionAffected Software

Parent advisories

This vulnerability appears in the following advisories.

IBM-7283858

Frequently Asked Questions

Who can exploit this issue?

An attacker needs local access to an affected IBM AIX or IBM PowerVM VIOS system and must be able to cause the system to read a crafted filesystem image.

What could successful exploitation cause?

The crafted image can trigger an out-of-bounds write on the kernel stack while directories are read. This can crash the system and may potentially allow privilege escalation.