Security Bulletin: This Power System update is being released to address CVE 2022-34331

Summary A security problem for CVE-2022-34331 was addressed where switches configured to monitor network traffic for malicious activity are not effective because of errant adapter configuration changes. The misconfigured adapter can cause network traffic to flow directly between the VFs and not o...

CVE-2022-34331

CVE-2022-34331 affects IBM PowerVM Hypervisor (FW950 through FW1010) where a sequence of maintenance operations on SRIOV NICs can misconfigure the adapter and disable the intended VEPA configuration. The IBM/Power9+ PowerVM firmware updates listed as remediation are FW950.50 (950_105), FW1010.40 ...

CVE-2022-34331 IBM Power FW security bypass

After performing a sequence of Power FW950, FW1010 maintenance operations a SRIOV network adapter can be improperly configured leading to desired VEPA configuration being disabled. IBM X-Force ID: 229695...