EUVD-2026-62869

IBM AIX 7.2, and 7.3 and IBM PowerVM VIOS 4.1 could allow a local attacker to obtain sensitive information due to an out-of-bounds read...

CVE-2026-17097 Power System Improper Validation

IBM PowerVM Hypervisor FW1120.00, FW1110.00 through FW1110.30, FW1060.00 through FW1060.80, and FW950.00 through FW950.H2 is affected by a vulnerability in the PowerVM hypervisor call interface. An attacker with root access to a guest partition can issue a specially crafted hypervisor call causin...

CVE-2026-74265

A flaw was found in the mana network driver of the Linux kernel. When creating a General DMA GDMA queue, the queue-id may not be properly initialized. If the queue creation fails before a valid ID is assigned, a subsequent cleanup operation can incorrectly use a zero ID, potentially corrupting th...

CVE-2026-74263

A flaw was found in the Linux kernel's Wireless Wide Area Network WWAN t7xx driver. The t7xxportctrltx function, which handles control transmissions, fails to validate the return value of skbclone. An attacker with local access could exploit this by triggering a scenario where skbclone returns a...

CVE-2026-16873 Vulnerabilities in IBM AIX and PowerVM VIOS

IBM AIX 7.2, and 7.3 and IBM PowerVM VIOS 4.1 could allow a local attacker to achieve local privilege escalation due to an out-of-bounds write...

EUVD-2026-62875

IBM AIX 7.2, and 7.3 and IBM PowerVM VIOS 4.1 could allow a local attacker to achieve local privilege escalation due to an out-of-bounds write...

CVE-2026-16873

IBM AIX 7.2/7.3 and PowerVM VIOS 4.1 suffer from an out-of-bounds write enabling local privilege escalation (CVSS 7.8 HIGH). No exploitation details or patch versions are provided in the documents; see IBM support reference for updates.

CVE-2026-18821

IBM PowerVM Hypervisor firmware (FW1120.00, FW1110.00–FW1110.30, FW1060.00–FW1060.80, FW950.00–FW950.H2) is vulnerable to an out-of-bounds write (CWE-787) in partition firmware during network boot . An unauthenticated attacker on the adjacent network can send a malformed packet to achieve arbitra...

CVE-2026-18821 Power System Out-of-bounds Write

IBM PowerVM Hypervisor FW1120.00, FW1110.00 through FW1110.30, FW1060.00 through FW1060.80, and FW950.00 through FW950.H2 Power Systems Firmware is affected by a vulnerability in partition firmware during network boot. An unauthenticated attacker on the same network as a partition undergoing...

MINI-J2V7-765X-P3P7

Bulletin has no description...

MINI-P6Q9-76C4-5PCF

Bulletin has no description...

EUVD-2026-62754

IBM Virtualization Management Interface FW1110.00 through FW1110.30, FW1120.00 through FW1120.00, and FW1060.00 through FW1060.80 is affected by a vulnerability in the Virtualization Management Interface VMI. An attacker with authenticated administrator-level access can cause the VMI to crash. Th...

CVE-2026-16724

IBM Power Systems firmware running the Virtualization Management Interface (VMI) is vulnerable to CWE-190 integer overflow, classified CVSS 4.5 (Medium). Authenticated administrators can crash the VMI, which auto-restarts, but repeated exploitation could cause sustained availability impact. Affec...

CVE-2026-16866

IBM AIX 7.2/7.3 and PowerVM VIOS 4.1 are vulnerable to an out-of-bounds read exploitable remotely (CVSS 4.8, HIGH complexity, no privileges) causing denial of service. IBM's support page (referenced) may contain patch details. No exploitation or in-the-wild activity is documented in the provided ...

CVE-2026-16866 Vulnerabilities in IBM AIX and PowerVM VIOS

IBM AIX 7.2, and 7.3 and IBM PowerVM VIOS 4.1 could allow a remote attacker to cause a denial of service due to an out-of-bounds read...

EUVD-2026-62753

IBM AIX 7.2, and 7.3 and IBM PowerVM VIOS 4.1 could allow a remote attacker to cause a denial of service due to an out-of-bounds read...

CVE-2026-74539

A flaw was found in the Linux kernel's Bluetooth ISO subsystem. A missing lock in a critical function allows for concurrent access to internal data structures without proper synchronization. This concurrency issue could lead to system instability or a denial of service, impacting the availability...

CVE-2026-74522

A flaw was found in ksmbd, a component of the Linux kernel. This use-after-free vulnerability occurs when a ksmbd file object is prematurely freed while another session still holds a reference to it. This can lead to the system attempting to access freed memory, potentially causing a system crash...

CVE-2026-74485

A flaw was found in the binfmtmisc component of the Linux kernel. An unprivileged local user, operating within a user namespace, could exploit this vulnerability. By registering a binfmtmisc string where the chosen delimiter character is also a flag character, the system's flag field parser can...

CVE-2026-74264

A flaw was found in the Linux kernel's network watchdog component. A race condition in the reference count tracking mechanism, specifically between netdevwatchdogup and devwatchdog, allows for concurrent overwriting or freeing of reference tracking information. This can lead to list corruption an...