Information Disclosure Vulnerability in IBM PowerVM Hypervisor

CVE-2021-38917

What is CVE-2021-38917?

The IBM PowerVM Hypervisor, specifically versions FW860, FW940, and FW950, is susceptible to a security vulnerability that could allow an attacker with service access to the Flexible Service Processor (FSP) to read and modify arbitrary host system memory. This security flaw arises from a series of specially crafted service procedures that can be exploited, leading to potential unauthorized access to sensitive information. It is crucial for users to apply necessary mitigations and updates to protect against this risk.

References