Vulnerability in IBM Power Systems Firmware Affecting BMC/FSP Interface

CVE-2026-17063

What is CVE-2026-17063?

IBM Power Systems Firmware contains a vulnerability in the interface between the Baseboard Management Controller (BMC) and the host system, which can be exploited by an attacker with service account or root access. This vulnerability may allow an unauthorized user to gain access to and disrupt the host processor state. Consequently, this could lead to significant disruptions within the managed system, affecting all hosted partitions and posing serious risks to system confidentiality and availability.

References