Description
IBM AIX 7.2, and 7.3 and IBM PowerVM VIOS 4.1 could allow a local attacker to execute arbitrary code due to improper validation of an attacker-controlled pointer.
Published: 2026-08-20
Score: 8.2 High
EPSS: < 1% Very Low
KEV: No
Impact: n/a
Action: n/a
AI Analysis

Impact

The vulnerability is an improper validation of an attacker‑controlled pointer in IBM AIX 7.2, 7.3 and IBM PowerVM VIOS 4.1. A local user can trigger the flaw to execute arbitrary code with the privileges of that user. The flaw could compromise confidentiality, integrity, and availability of the affected system.

Affected Systems

AIX 7.2 and 7.3, including Service Pack 2, 3, 5 and Release 7.3 TL04, TL03, TL02, as well as AIX 7.2 TL05, are vulnerable. IBM PowerVM VIOS 4.1, with Fix Packs 4.1.0.50, 4.1.1.30 or 4.1.2.20, is also affected. The patches are cumulative and can be applied via IBM Fix Central; a LPAR reboot is required to complete the SP/FP update, although Live Update on AIX can avoid a reboot.

Risk and Exploitability

The CVSS score of 8.2 indicates high severity. EPSS data is not available, so the exact exploitation probability cannot be quantified, but the absence of the vulnerability in CISA's KEV catalog does not reduce its risk. Attackers must possess local access to the system; once the flaw is leveraged, they can run code with the privilege level of the user, potentially affecting any processes running on the system.

Generated by OpenCVE AI on August 21, 2026 at 00:31 UTC.

Remediation

Vendor Solution

A.  APARS IBM has assigned the following APARs to this problem: AIX LevelAPARAvailability  SPKEY7.2.5IJ5956608/14/2026SP13key_w_apar7.3.2IJ5956508/14/2026SP05key_w_apar7.3.3IJ5956408/14/2026SP03key_w_apar7.3.4IJ59563 08/14/2026SP02key_w_apar VIOS LevelAPARAvailability SPKEY4.1.0IJ5956508/14/20264.1.0.50key_w_apar4.1.1IJ5956408/14/20264.1.1.30key_w_apar4.1.2IJ5956308/14/20264.1.2.20key_w_apar B.  FIXES IBM strongly recommends addressing the vulnerability now.  AIX and VIOS fixes are available and can be downloaded from Fix Central: https://www.ibm.com/support/fixcentral  An LPAR reboot is required to complete the SP/FP update. On AIX, Live Update can be used to avoid a reboot.  IBM has assigned the following AIX Service Packs (SPs) and VIOS Fix Packs (FPs) as the remediation levels for the published vulnerabilities. AIX Level Service PackAIX 7.3 TL04SP2AIX 7.3 TL03SP3AIX 7.3 TL02SP5AIX 7.2 TL05 SP13 PowerVM VIOS LevelFix PackVIOS 4.1.2 4.1.2.20VIOS 4.1.1 4.1.1.30VIOS 4.1.0  4.1.0.50 Note: These SPs/FPs are cumulative and include fixes for all previously published AIX/VIOS security vulnerabilities. They can be applied on top of any earlier affected level of the TL . Note: To apply these patches using nimsh secure, special steps must be taken as the protocol between master and client is updated to be more secure. Please read this article: https://www.ibm.com/support/pages/node/7283157 Note: For VIOS 4.1.0 and VIOS 4.1.1, additional steps are required to migrate to the latest Postgres15 after applying the 4.1.1.30 or 4.1.0.50 FPs above. Instructions to do that can be found here:                             4.1.0.50 post-update instructions: https://www.ibm.com/support/pages/node/7283819           4.1.1.30 post-update instructions: https://www.ibm.com/support/pages/node/7283823

OpenCVE Recommended Actions

  • Download and install the latest IBM AIX Service Pack or PowerVM VIOS Fix Pack recommended for your platform from Fix Central, following IBM guidance.
  • Reboot the LPAR after installation; if you are using AIX Live Update, perform the update without reboot to avoid downtime.
  • If you are operating PowerVM VIOS 4.1.0 or 4.1.1, execute the post‑update migration to Postgres15 using the IBM‑supplied instructions.
  • If you use nimsh secure for patching, read and follow IBM's article on the updated master‑client protocol.

Generated by OpenCVE AI on August 21, 2026 at 00:31 UTC.

Tracking

Sign in to view the affected projects.

Advisories

No advisories yet.

History

Tue, 25 Aug 2026 18:45:00 +0000

Type Values Removed Values Added
First Time appeared Ibm vios
CPEs cpe:2.3:a:ibm:vios:*:*:*:*:*:*:*:*
cpe:2.3:o:ibm:aix:*:*:*:*:*:*:*:*
Vendors & Products Ibm vios

Sat, 22 Aug 2026 04:30:00 +0000

Type Values Removed Values Added
Metrics ssvc

{'options': {'Automatable': 'no', 'Exploitation': 'none', 'Technical Impact': 'total'}, 'version': '2.0.3'}

Thu, 20 Aug 2026 22:15:00 +0000

Type Values Removed Values Added
Description IBM AIX 7.2, and 7.3 and IBM PowerVM VIOS 4.1 could allow a local attacker to execute arbitrary code due to improper validation of an attacker-controlled pointer.
Title Vulnerabilities in IBM AIX and PowerVM VIOS
First Time appeared Ibm
Ibm aix
Ibm powervm Vios
Weaknesses CWE-822
CPEs cpe:2.3:a:ibm:aix:7.2.0:*:*:*:*:*:*:*
cpe:2.3:a:ibm:aix:7.2:*:*:*:*:*:*:*
cpe:2.3:a:ibm:aix:7.3.0:*:*:*:*:*:*:*
cpe:2.3:a:ibm:aix:7.3:*:*:*:*:*:*:*
cpe:2.3:a:ibm:powervm_vios:4.1.0:*:*:*:*:*:*:*
cpe:2.3:a:ibm:powervm_vios:4.1:*:*:*:*:*:*:*
Vendors & Products Ibm
Ibm aix
Ibm powervm Vios
References
Metrics cvssV3_1

{'score': 8.2, 'vector': 'CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:C/C:H/I:H/A:H'}

Subscriptions

Ibm Aix Powervm Vios Vios
cve-icon MITRE

Status: PUBLISHED

Assigner: ibm

Published:

Updated: 2026-08-22T03:56:04.776Z

Reserved: 2026-08-04T14:42:20.244Z

Link: CVE-2026-18840

cve-icon Vulnrichment

Updated: 2026-08-21T14:51:06.468Z

cve-icon NVD

Status : Analyzed

Published: 2026-08-20T22:17:17.603

Modified: 2026-08-25T18:29:48.940

Link: CVE-2026-18840

cve-icon Redhat

No data.

cve-icon OpenCVE Enrichment

Updated: 2026-08-21T00:45:07Z

Weaknesses
  • CWE-822

    Untrusted Pointer Dereference