Security Bulletin: The PowerVM hypervisor can assign duplicate WWPN's to virtual fiber channel adapters in peer VMs

Summary

In some cases the PowerVM hypervisor can assign duplicate WWPN’s to virtual fiber channel adapters in peer VMs after a specific series of service actions are performed

Vulnerability Details

CVEID:CVE-2021-38923
**DESCRIPTION:**IBM PowerVM Hypervisor could allow a privileged user to gain access to another VM due to assigning duplicate WWPNs.
CVSS Base score: 8
CVSS Temporal Score: See: https://exchange.xforce.ibmcloud.com/vulnerabilities/210162 for the current score.
CVSS Vector: (CVSS:3.0/AV:N/AC:H/PR:H/UI:N/S:C/C:H/I:H/A:H)

Affected Products and Versions

Remediation/Fixes

Customers with the product below should install FW1010.01(1010_069) or newer to remediate this concern.

Power 10

1. IBM Power System E1080 (9080-HEX)

Workarounds and Mitigations

None