A flaw in the partition resource dump interface of IBM PowerVM Hypervisor allows an attacker who has authenticated administrator-level access to the Host Management Console or service processor to capture a limited snapshot of a partition’s processor state. The exposed data can reveal sensitive information about the managed system, resulting in a confidentiality degradation. The vulnerability is catalogued as CWE-212, indicating improper restriction of operations that can lead to information leakage.

IBM PowerVM Hypervisor firmware versions FW1120.00 through FW1120.01, FW1110.00 through FW1110.31, FW1060.00 through FW1060.81, and FW950.00 through FW950.H3 are affected on all listed IBM Power System models. This includes Power 11 systems such as the E1180, S1122, S1124, S1122s, S1114, L1122, L1124, and E1150; Power 10 systems including the E1080, S1022, S1024, S1022s, S1014, L1022, L1024, E1050, and S1012; and Power 9 systems such as S922, H922, S914, S924, H924, E950, and E980. The specific firmware updates recommended by IBM for each model are FW1110.32 or newer for Power 11, FW1120.02 or newer for Power 11’s second layer, FW1060.82 or newer for Power 10, and FW950.H4 or newer for Power 9.

The CVSS score of 3.4 indicates low severity and the EPSS score is less than 1 %, suggesting a very low probability of exploitation in the wild. The vulnerability is not listed in CISA’s KEV catalog. Exploitation requires privileged administrator access to the HMC or service processor, a capability that is typically restricted to a small number of trusted personnel. Because the needed foothold is high privilege, the risk of successful exploitation in a well‑protected environment is limited, but remains a concern if administrative credentials are widely distributed or compromised.