The vulnerable firmware in IBM PowerVM Hypervisor (FW1120.00→1120.01, FW1110.00→1110.31, FW1060.00→1060.81) introduces a flaw in a hypervisor call interface. A guest partition that has root privileges can invoke the call to read a small portion of the hypervisor’s memory space. The data that can be retrieved is not under the attacker’s control, but it can contain sensitive information belonging to the hypervisor or other guest partitions. This results in a confidentiality impact for the affected host.

IBM PowerVM Hypervisor firmware on Power 11 and Power 10 servers. Affected firmware revisions include FW1120.00 through FW1120.01, FW1110.00 through FW1110.31, and FW1060.00 through FW1060.81. The premise is that any PowerVM hypervisor running one of these firmware versions on Power 11 or Power 10 models such as the Power System E1180, S1122, S1124, S1122s, S1114, L1122, L1124, E1150, S1112, E1080, S1022, S1024, S1022s, S1014, L1022, L1024, E1050, S1012 hosts is vulnerable.

The CVSS v3.2 score of 3.2 reflects a low‑severity, confidentiality‑only impact. The EPSS score is not available, suggesting no significant exploitation data. The vulnerability is not listed in the CISA KEV catalog, indicating no known active exploitation. Attackers require root access inside a guest partition, which limits the attack surface. In a multi‑tenant environment where arbitrary OS images may run in guest partitions, the memory read could expose data from co‑resident guests or the hypervisor, but the attacker cannot manipulate which pages are read.