Denial of Service Vulnerability in IBM PowerVM Novalink
CVE-2026-9171

7.5HIGH

Key Information:

Vendor

IBM
Status
Powervm Novalink
Vendor
CVE Published:
17 July 2026

What is CVE-2026-9171?

IBM PowerVM Novalink is susceptible to a denial of service attack due to the processing of specially-crafted requests. This vulnerability allows a remote attacker to exploit the system, leading to significant memory resource consumption, which could degrade performance or render the server unresponsive.

Affected Version(s)

PowerVM Novalink 2.2.02.2.12.2.1.1

PowerVM Novalink 2.3.02.3.0.12.3.12.3.2

References

https://www.ibm.com/support/pages/node/7280226
vendor-advisorypatch

CVSS V3.1

Score:
7.5
Severity:
HIGH
Confidentiality:
None
Integrity:
None
Availability:
None
Attack Vector:
Network
Attack Complexity:
Low
Privileges Required:
None
User Interaction:
None
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.