PowerVM Hypervisor vulnerability

What happened

IBM PowerVM Hypervisor FW1120.00 through FW1120.01, FW1110.00 through FW1110.31, FW1060.00 through FW1060.81, and FW950.00 through FW950.H3 could allow a remote attacker to obtain sensitive information due to an out-of-bounds read.

Affected versions

PowerVM Hypervisor: FW1120.00 through FW1120.01 (semver); FW1110.00 through FW1110.31 (semver); FW1060.00 through FW1060.81 (semver); FW950.00 through FW950.H3 (semver) Fixed: See vendor advisory.

Why it matters

Review the vendor advisory and exposure of the affected product to determine operational impact.

Detection & mitigation

• Apply vendor-provided updates or mitigations.
• Review affected product exposure and access logs.