CVEvulnerability

CVE-2026-19442

8.8 HIGH Published 2026-08-20 Modified 2026-10-26 Official page ↗
Status
Analyzed
Published
2026-08-20
Last modified
2026-10-26
Assigner
[email protected]
CVSS 3.1 ([email protected])
8.2 HIGH — CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:C/C:H/I:H/A:H
CVSS 3.1 ([email protected])
8.8 HIGH — CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H
Weaknesses
CWE-822

Description

IBM AIX 7.2, and 7.3 and IBM PowerVM VIOS 4.1 has a pointer validation flaw exists in the AIX Virtual SCSI (vSCSI) initiator driver. Successful exploitation may result in denial of service, privilege escalation, or full compromise of the client LPAR kernel.

Affected configurations

• ibm vios (>= 4.1.0 < 4.1.0.50) • ibm vios (>= 4.1.1.0 < 4.1.1.30) • ibm vios (>= 4.1.2.0 < 4.1.2.20) • ibm aix (>= 7.2.5 <= 7.2.5.212) • ibm aix (>= 7.3.2 <= 7.3.2.5) • ibm aix (>= 7.3.3 <= 7.3.3.2) • ibm aix (>= 7.3.4 <= 7.3.4.1)

Related

Weakness · CWE (1)

  • CWE-822 Untrusted Pointer Dereference weakness

References