CVE-2024-41781

Summary: CVE-2024-41781 affects IBM PowerVM Hypervisor Platform KeyStore. If an attacker gains service access to the HMC, they can locate and decrypt data in the Platform KeyStore via service procedures. Affected versions : PowerVM Hypervisor FW950.00–FW950.90, FW1030.00–FW1030.60, FW1050.00–FW10...

CVE-2022-34331

CVE-2022-34331 affects IBM PowerVM Hypervisor (FW950 through FW1010) where a sequence of maintenance operations on SRIOV NICs can misconfigure the adapter and disable the intended VEPA configuration. The IBM/Power9+ PowerVM firmware updates listed as remediation are FW950.50 (950_105), FW1010.40 ...

CVE-2023-30440

CVE-2023-30440 affects IBM PowerVM Hypervisor across multiple firmware branches (FW860, FW950, FW1010, FW1020, FW1030). The issue allows a local attacker who controls a partition with an SRIOV VF to cause a denial of service to a peer partition or arbitrary data corruption. Root cause details spe...

CVE-2022-22445

IBM PowerVM Hypervisor on POWER9 systems is affected by CVE-2022-22445. An attacker gaining service access to the FSP or admin authority in a partition can compromise partition firmware. The IBM advisory and related sources specify affected PowerVM Hypervisor versions FW1010 and later, FW950 and ...

CVE-2021-20505

The CVE-2021-20505 entry concerns IBM PowerVM Logical Partition Mobility (LPM) encryption key exchange protocol weaknesses. According to NVD/NVD-derived data, if an attacker can capture encrypted LPM traffic and gains service access to the Flexible Service Processor (FSP), they can perform PowerV...

CVE-2023-30438

PowerVM in IBM Power9/Power10 systems contains an internally discovered vulnerability that could allow a privileged user in one logical partition to violate isolation and potentially leak data or execute code in other partitions on the same physical server. Affected component is the PowerVM Hyper...

CVE-2025-0986

CVE-2025-0986 affects IBM PowerVM Hypervisor FW1050.00–FW1050.30 and FW1060.00–FW1060.20. A local user, under certain Linux processor-compatibility mode configurations, can cause undetected data loss or errors when gzip is accelerated by hardware. IBM’s bulletin notes this is mitigated by upgradi...

CVE-2023-25683

This CVE concerns IBM PowerVM Hypervisor information disclosure. Affected firmware ranges are FW950.00–FW950.71, FW1010.00–FW1010.40, FW1020.00–FW1020.20, and FW1030.00–FW1030.11. The underlying issue allows an attacker with HMC service access to obtain sensitive information. IBM’s bulletin cites...

CVE-2021-38917

IBM PowerVM Hypervisor FW860, FW940, and FW950 are vulnerable to an access-control flaw that allows an attacker who gains service access to the FSP to read and write arbitrary host memory via crafted service procedures. Impact: high confidentiality and integrity, no availability impact. Affected ...

CVE-2021-38918

CVE-2021-38918 – IBM PowerVM Hypervisor Affected products: IBM PowerVM Hypervisor firmware FW860, FW940, FW950, and FW1010 (Power 8/9/10 platforms listed in the IBM bulletin). What is vulnerable: A specific sequence of VM management operations from the management console (HMC, Novalink, or PowerV...

CVE-2021-38937

IBM PowerVM Hypervisor CVE-2021-38937 affects FW940, FW950, and FW1010. An authenticated user can trigger a specially crafted IBMi Hypervisor call to crash the system. Remediation is to upgrade to FW940.50(940_095), FW950.30(950_092), FW1010.01(1010_69) or newer. Affected Power VM Hypervisor vers...

CVE-2021-29795

IBM PowerVM Hypervisor vulnerability CVE-2021-29795 allows a local user within a partition to issue a specially crafted sequence of hypervisor calls that can crash the system. Affected products are PowerVM Hypervisor FW860, FW930, FW940, and FW950 across Power8/Power9 platforms. Root cause: a mis...

CVE-2023-46183

IBM PowerVM Hypervisor vulnerability CVE-2023-46183 discloses sensitive partition information to a sysadmin via the Hypervisor in affected firmware. Affected products and versions: FW950.00–FW950.90, FW1020.00–FW1020.40, and FW1030.00–FW1030.30. Root cause: information disclosure within PowerVM H...

CVE-2023-33851

CVE-2023-33851 affects IBM PowerVM Hypervisor information disclosure. Vulnerable firmware versions: FW950.00–FW950.90, FW1020.00–FW1020.40, FW1030.00–FW1030.30. Issue: could reveal sensitive partition data to a system administrator. Remediation: upgrade to FW950.A0 (950_145) or newer; FW1020.50 (...

CVE-2025-36035

CVE-2025-36035 affects IBM PowerVM Hypervisor versions FW950.00–FW950.E0, FW1050.00–FW1050.50, and FW1060.00–FW1060.40. A local privileged user can issue a crafted IBM i hypervisor call to cause a denial of service by disclosing memory contents or consuming memory resources. IBM’s advisory and Re...

CVE-2025-36194

Summary: CVE-2025-36194 affects IBM PowerVM Hypervisor. The hypervisor may expose a limited amount of data to a peer partition in specific shared processor configurations during certain operations. Affected versions: PowerVM Hypervisor FW1110.00–FW1110.03, FW1060.00–FW1060.51, and FW950.00–FW950....

CVE-2025-36238

CVE-2025-36238 affects IBM PowerVM Hypervisor: FW1110.00–FW1110.03, FW1060.00–FW1060.51, and FW950.00–FW950.F0 may let a local administrator obtain sensitive information from a Virtual TPM via PowerVM service procedures. Affected products include PowerVM Hypervisor across Power 9–11 generations (...