CVEvulnerability

CVE-2026-4932

4.6 MEDIUM Published 2026-07-28 Modified 2026-10-23 Official page ↗
Status
Analyzed
Published
2026-07-28
Last modified
2026-10-23
Assigner
[email protected]
CVSS 3.1 ([email protected])
4.2 MEDIUM — CVSS:3.1/AV:P/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N
CVSS 3.1 ([email protected])
4.6 MEDIUM — CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
Weaknesses
CWE-331

Description

IBM PowerVM Hypervisor FW1110.00 through FW1110.20, and FW1060.00 through FW1060.71 could allow an attacker with physical access to the Transparent Memory Encryption (TME) hardware to decrypt encrypted memory due to insufficient cryptographic entropy.

Affected configurations

• ibm power system s1122 \(9824-22a\) firmware (>= fw1110.00 < fw1110.30) • ibm power system s1124 \(9824-42a\) firmware (>= fw1110.00 < fw1110.30) • ibm power system s1122s \(9824-22b\) firmware (>= fw1110.00 < fw1110.30) • ibm power system s1114 \(9824-41b\) firmware (>= fw1110.00 < fw1110.30) • ibm power system l1122 \(9856-22h\) firmware (>= fw1110.00 < fw1110.30) • ibm power system l1124 \(9856-42h\) firmware (>= fw1110.00 < fw1110.30) • ibm power system e1150 \(9043-mru\) firmware (>= fw1110.00 < fw1110.30) • ibm power system s1022 \(9105-22a\) firmware (>= fw1060.00 < fw1060.72) • ibm power system s1024 \(9105-42a\) firmware (>= fw1060.00 < fw1060.72) • ibm power system s1022s \(9105-22b\) firmware (>= fw1060.00 < fw1060.72) • ibm power system s1014 \(9105-41b\) firmware (>= fw1060.00 < fw1060.72) • ibm power system l1022 \(9786-22h\) firmware (>= fw1060.00 < fw1060.72) • ibm power system l1024 \(9786-42h\) firmware (>= fw1060.00 < fw1060.72) • ibm power system e1050 \(9043-mrx\) firmware (>= fw1060.00 < fw1060.72) • ibm power system s1012 \(9028-21b\) firmware (>= fw1060.00 < fw1060.72) • ibm power system e1180 \(9080-heu\) firmware (>= fw1110.00 < fw1110.30) • ibm power system e1080 \(9080-hex\) firmware (>= fw1060.00 < fw1060.72)

Related

Weakness · CWE (1)

  • CWE-331 Insufficient Entropy weakness

References