Memory Access Vulnerability in IBM Power Systems Firmware

CVE-2026-16933

What is CVE-2026-16933?

A vulnerability in IBM Power Systems Firmware affects devices by exposing critical interfaces between the Baseboard Management Controller (BMC) and the host system. This flaw allows attackers with service account or root access to the BMC/FSP to exploit memory access, enabling them to read and write arbitrary regions of the host system memory. Consequently, this breach grants complete control over the host system and all hosted partitions, posing significant threats to confidentiality, integrity, and availability of the systems involved.

References