Description
IBM AIX 7.2, and 7.3 and IBM PowerVM VIOS 4.1 could allow a local attacker to gain elevated privileges due to a heap-based buffer overflow.
Published: 2026-08-20
Score: 8.8 High
EPSS: < 1% Very Low
KEV: No
Impact: n/a
Action: n/a
AI Analysis

Impact

IBM AIX 7.2 and 7.3, and IBM PowerVM VIOS 4.1 contain a heap‑based buffer overflow that a local attacker can exploit to gain elevated privileges, leading to potential unauthorized system control as described by CWE‑787. The vulnerability allows a user with local access to execute arbitrary code on the affected systems.

Affected Systems

The flaw affects IBM AIX version 7.2.x and 7.3.x, specifically all service packs up to and including AIX 7.3 TL04SP2, AIX 7.3 TL03SP3, AIX 7.3 TL02SP5, AIX 7.2 TL05 SP13, and the corresponding cumulative patch levels described. IBM PowerVM VIOS 4.1.0, 4.1.1, and 4.1.2 are also vulnerable if they are on earlier Fix Pack levels than VIOS 4.1.2 4.1.2.20, VIOS 4.1.1 4.1.1.30, or VIOS 4.1.0 4.1.0.50.

Risk and Exploitability

The CVSS score of 8.8 classifies this issue as high severity. Although EPSS data is missing, the vulnerability is not listed in CISA KEV, indicating no known widespread exploitation yet. The attack vector requires local access; an attacker would need to execute a crafted payload on the host to trigger the heap overflow and obtain root or higher privileges. Organizations running these products without the latest Service Pack or Fix Pack should consider the risk significant, especially if the systems are not isolated from untrusted users.

Generated by OpenCVE AI on August 21, 2026 at 00:00 UTC.

Remediation

Vendor Solution

A.  APARS IBM has assigned the following APARs to this problem: AIX LevelAPARAvailability  SPKEY7.2.5IJ5956608/14/2026SP13key_w_apar7.3.2IJ5956508/14/2026SP05key_w_apar7.3.3IJ5956408/14/2026SP03key_w_apar7.3.4IJ59563 08/14/2026SP02key_w_apar VIOS LevelAPARAvailability SPKEY4.1.0IJ5956508/14/20264.1.0.50key_w_apar4.1.1IJ5956408/14/20264.1.1.30key_w_apar4.1.2IJ5956308/14/20264.1.2.20key_w_apar B.  FIXES IBM strongly recommends addressing the vulnerability now.  AIX and VIOS fixes are available and can be downloaded from Fix Central: https://www.ibm.com/support/fixcentral  An LPAR reboot is required to complete the SP/FP update. On AIX, Live Update can be used to avoid a reboot.  IBM has assigned the following AIX Service Packs (SPs) and VIOS Fix Packs (FPs) as the remediation levels for the published vulnerabilities. AIX Level Service PackAIX 7.3 TL04SP2AIX 7.3 TL03SP3AIX 7.3 TL02SP5AIX 7.2 TL05 SP13 PowerVM VIOS LevelFix PackVIOS 4.1.2 4.1.2.20VIOS 4.1.1 4.1.1.30VIOS 4.1.0  4.1.0.50 Note: These SPs/FPs are cumulative and include fixes for all previously published AIX/VIOS security vulnerabilities. They can be applied on top of any earlier affected level of the TL . Note: To apply these patches using nimsh secure, special steps must be taken as the protocol between master and client is updated to be more secure. Please read this article: https://www.ibm.com/support/pages/node/7283157 Note: For VIOS 4.1.0 and VIOS 4.1.1, additional steps are required to migrate to the latest Postgres15 after applying the 4.1.1.30 or 4.1.0.50 FPs above. Instructions to do that can be found here:                             4.1.0.50 post-update instructions: https://www.ibm.com/support/pages/node/7283819           4.1.1.30 post-update instructions: https://www.ibm.com/support/pages/node/7283823

OpenCVE Recommended Actions

  • Apply the IBM AIX LevelAPARAvailability and VIOS LevelAPARAvailability patches from Fix Central, using the latest Service Pack (e.g., AIX 7.3 TL04SP2 or newer, AIX 7.2 TL05 SP13) and corresponding Fix Pack (e.g., VIOS 4.1.2 4.1.2.20, VIOS 4.1.1 4.1.1.30, VIOS 4.1.0 4.1.0.50).
  • If AIX Live Update is available, use it to avoid a reboot; otherwise reboot the LPAR after the SP/FP update to complete the installation.
  • For VIOS 4.1.0 or 4.1.1, perform the mandatory migration to PostgreSQL 15 following IBM's post‑update instructions (viewed at the provided IBM support links).

Generated by OpenCVE AI on August 21, 2026 at 00:00 UTC.

Tracking

Sign in to view the affected projects.

Advisories

No advisories yet.

History

Mon, 24 Aug 2026 17:30:00 +0000

Type Values Removed Values Added
First Time appeared Ibm vios
CPEs cpe:2.3:a:ibm:vios:*:*:*:*:*:*:*:*
cpe:2.3:o:ibm:aix:*:*:*:*:*:*:*:*
Vendors & Products Ibm vios

Fri, 21 Aug 2026 16:30:00 +0000

Type Values Removed Values Added
Metrics ssvc

{'options': {'Automatable': 'no', 'Exploitation': 'none', 'Technical Impact': 'total'}, 'version': '2.0.3'}

Thu, 20 Aug 2026 21:45:00 +0000

Type Values Removed Values Added
Description IBM AIX 7.2, and 7.3 and IBM PowerVM VIOS 4.1 could allow a local attacker to gain elevated privileges due to a heap-based buffer overflow.
Title Vulnerabilities in IBM AIX and PowerVM VIOS
First Time appeared Ibm
Ibm aix
Ibm powervm Vios
Weaknesses CWE-787
CPEs cpe:2.3:a:ibm:aix:7.2.0:*:*:*:*:*:*:*
cpe:2.3:a:ibm:aix:7.2:*:*:*:*:*:*:*
cpe:2.3:a:ibm:aix:7.3.0:*:*:*:*:*:*:*
cpe:2.3:a:ibm:aix:7.3:*:*:*:*:*:*:*
cpe:2.3:a:ibm:powervm_vios:4.1.0:*:*:*:*:*:*:*
cpe:2.3:a:ibm:powervm_vios:4.1:*:*:*:*:*:*:*
Vendors & Products Ibm
Ibm aix
Ibm powervm Vios
References
Metrics cvssV3_1

{'score': 8.8, 'vector': 'CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H'}

Subscriptions

Ibm Aix Powervm Vios Vios
cve-icon MITRE

Status: PUBLISHED

Assigner: ibm

Published:

Updated: 2026-08-22T03:56:32.808Z

Reserved: 2026-07-24T07:34:06.750Z

Link: CVE-2026-16934

cve-icon Vulnrichment

Updated: 2026-08-21T15:58:59.080Z

cve-icon NVD

Status : Analyzed

Published: 2026-08-20T22:17:07.643

Modified: 2026-08-24T17:20:38.980

Link: CVE-2026-16934

cve-icon Redhat

No data.

cve-icon OpenCVE Enrichment

Updated: 2026-08-21T00:15:03Z

Weaknesses