Denial of Service Risk in IBM PowerVM Hypervisor by Local Privileged Users

CVE-2025-36035

What is CVE-2025-36035?

A vulnerability exists in IBM PowerVM Hypervisor versions FW950.00 to FW950.E0, FW1050.00 to FW1050.50, and FW1060.00 to FW1060.40. This security flaw allows local privileged users to execute specially crafted IBM i hypervisor calls, which can lead to denial of service conditions by disclosing sensitive memory contents or exhausting memory resources. It is essential for affected users to implement the recommended patches to mitigate this risk and maintain system integrity.

References