Vulnerability in IBM PowerVM Hypervisor Affecting Guest Partitions

CVE-2026-19492

What is CVE-2026-19492?

IBM PowerVM Hypervisor versions FW1120.00 to FW1120.01, FW1110.00 to FW1110.31, and FW1060.00 to FW1060.81 contain a vulnerability within the hypervisor call interface. This issue allows a malicious actor with root access to a guest partition to read a limited segment of hypervisor memory, potentially disclosing sensitive information from the hypervisor or other guest partitions on the same system. This situation poses significant risks in multi-tenant setups, where the integrity and confidentiality of the data are paramount.

References