Vulnerability in IBM PowerVM Hypervisor Affects System Integrity and Availability

CVE-2026-17091

What is CVE-2026-17091?

IBM's PowerVM Hypervisor is vulnerable due to an issue in its hypervisor call interface. An attacker with root access to a guest partition may exploit this flaw by issuing a crafted hypervisor call that injects excessive data into the hypervisor or partition memory. This could lead to a system crash requiring a full platform restart, affecting all hosted partitions. Moreover, repeated exploitation could compromise system integrity and lead to ongoing availability issues, as the hypervisor may restart automatically, potentially causing further disruptions.

References