CVE-2026-16890 Vulnerabilities in IBM AIX and PowerVM VIOS

IBM AIX 7.2, and 7.3 and IBM PowerVM VIOS 4.1 could allow a local attacker to obtain sensitive information or cause a denial of service due to an integer overflow...

EUVD-2026-62861

IBM AIX 7.2, and 7.3 and IBM PowerVM VIOS 4.1 could allow a local attacker to obtain sensitive information or cause a denial of service due to an integer overflow...

CVE-2026-16890 Vulnerabilities in IBM AIX and PowerVM VIOS

IBM AIX 7.2, and 7.3 and IBM PowerVM VIOS 4.1 could allow a local attacker to obtain sensitive information or cause a denial of service due to an integer overflow...

CVE-2026-16890

IBM AIX 7.2/7.3 and PowerVM VIOS 4.1 contain an integer overflow exploitable by a local attacker with low privileges (CVSS 3.6, LOW) to obtain sensitive information or cause denial of service. IBM's support page (https://www.ibm.com/support/pages/node/7283858) is the primary reference; no exploit...

CVE-2026-17091 Power System Integer Overflow

IBM PowerVM Hypervisor FW1120.00, FW1110.00 through FW1110.30, FW1060.00 through FW1060.80, and FW950.00 through FW950.H2 is affected by a vulnerability in the PowerVM hypervisor call interface. An attacker with root access to a guest partition can issue a specially crafted hypervisor call to...

CVE-2026-17091 Power System Integer Overflow

IBM PowerVM Hypervisor FW1120.00, FW1110.00 through FW1110.30, FW1060.00 through FW1060.80, and FW950.00 through FW950.H2 is affected by a vulnerability in the PowerVM hypervisor call interface. An attacker with root access to a guest partition can issue a specially crafted hypervisor call to...

CVE-2026-17091

IBM PowerVM Hypervisor is affected by an integer overflow (CWE-190) in the hypervisor call interface. An attacker with root access to a guest partition can issue a specially crafted hypervisor call to inject arbitrary data into hypervisor or partition memory, causing either a full platform re-IPL...

CVE-2026-16724 Power System Integer Overflow

IBM Virtualization Management Interface FW1110.00 through FW1110.30, FW1120.00 through FW1120.00, and FW1060.00 through FW1060.80 is affected by a vulnerability in the Virtualization Management Interface VMI. An attacker with authenticated administrator-level access can cause the VMI to crash. Th...

CVE-2026-16724 Power System Integer Overflow

IBM Virtualization Management Interface FW1110.00 through FW1110.30, FW1120.00 through FW1120.00, and FW1060.00 through FW1060.80 is affected by a vulnerability in the Virtualization Management Interface VMI. An attacker with authenticated administrator-level access can cause the VMI to crash. Th...

CVE-2026-16724

IBM Power Systems firmware running the Virtualization Management Interface (VMI) is vulnerable to CWE-190 integer overflow, classified CVSS 4.5 (Medium). Authenticated administrators can crash the VMI, which auto-restarts, but repeated exploitation could cause sustained availability impact. Affec...

CVE-2026-16852 Vulnerabilities in IBM AIX and PowerVM VIOS

IBM AIX 7.2, and 7.3 and IBM PowerVM VIOS 4.1 could allow a remote attacker to cause a denial of service due to an integer overflow...

CVE-2026-16852

IBM AIX 7.2 and 7.3, and PowerVM VIOS 4.1, contain an integer overflow exploitable by a remote attacker with no privileges or user interaction, causing denial of service (CVSS 7.5 HIGH, availability impact only). IBM support reference: https://www.ibm.com/support/pages/node/7283858. No exploitati...

EUVD-2026-62747

IBM AIX 7.2, and 7.3 and IBM PowerVM VIOS 4.1 could allow a remote attacker to cause a denial of service due to an integer overflow...

CVE-2026-16852 Vulnerabilities in IBM AIX and PowerVM VIOS

IBM AIX 7.2, and 7.3 and IBM PowerVM VIOS 4.1 could allow a remote attacker to cause a denial of service due to an integer overflow...

CVE-2026-16661 Power System Integer Overflow

IBM PowerVM Hypervisor FW1120.00, FW1110.00 through FW1110.30, FW1060.00 through FW1060.80, and FW950.00 through FW950.H2 is affected by a vulnerability in the service processor mailbox interface. An attacker with authenticated service-level access to the FSP can exploit this vulnerability,...

CVE-2026-16661

CVE-2026-16661 affects the IBM PowerVM Hypervisor service processor mailbox interface across multiple firmware versions (FW950.00–FW950.H2, FW1060.00–FW1060.80, FW1110.00–FW1110.30, and FW1120.00). The root cause is an integer overflow (CWE-190). An attacker with authenticated service-level acces...

CVE-2026-16661 Power System Integer Overflow

IBM PowerVM Hypervisor FW1120.00, FW1110.00 through FW1110.30, FW1060.00 through FW1060.80, and FW950.00 through FW950.H2 is affected by a vulnerability in the service processor mailbox interface. An attacker with authenticated service-level access to the FSP can exploit this vulnerability,...

GHSA-VJHX-2CQW-3Q6Q Uprobe gadgets: unprivileged container's ld.so.cache causes high CPU utilization and container startup DoS

Summary An unprivileged container can block all other containers from starting on the same host by placing a crafted /etc/ld.so.cache file in its filesystem. When Inspektor Gadget attaches any uprobe-based gadget, it parses this file in the container startup path. A malicious cache causes 53...

CVE-2026-16933 Power System Integer Overflow

IBM Power Systems Firmware FW1120.00, FW1110.00 through FW1110.30, FW1060.00 through FW1060.80, FW950.00 through FW950.H2, OP940.00 through OP940.a1 Power9, and OP940.00 through OP940.81 Power HMC is affected by a vulnerability in the interface between the BMC/FSP and the host system. An attacker...

CVE-2026-16933 Power System Integer Overflow

IBM Power Systems Firmware FW1120.00, FW1110.00 through FW1110.30, FW1060.00 through FW1060.80, FW950.00 through FW950.H2, OP940.00 through OP940.a1 Power9, and OP940.00 through OP940.81 Power HMC is affected by a vulnerability in the interface between the BMC/FSP and the host system. An attacker...