A flaw in the PowerVM Hypervisor firmware allows an attacker who already has root-level access within a partition to maliciously modify the partition’s non‑volatile memory. This change prevents the affected partition from booting, and the failure remains until an operator manually deletes and rebuilds the partition configuration. The consequence is an integrity compromise of the firmware configuration and a denial of service for the affected partition.

The vulnerability affects IBM PowerVM Hypervisor firmware on Power‑Kit systems. All firmware releases from FW950.00 through FW950.H3, FW1060.00 to FW1060.81, FW1110.00 to FW1110.31, and FW1120.00 to FW1120.01 are susceptible. Customers running any of these firmware versions on Power 9, 10, or 11 platform components must consider an update.

The CVSS score of 5.1 indicates moderate impact, and the EPSS score is <1% (0.00105), indicating a very low probability of exploitation. The flaw is listed outside of the CISA KEV catalog, implying no publicly known exploits are documented. The attack vector requires privileged root access inside a partition, limiting the exposure to compromised or poorly secured environments; however, once this prerequisite is met, an attacker can disrupt availability of the partition and create a persistent integrity issue until remediation.