CVE-2026-17413CWE-129

CVE-2026-17413

Medium · published September 24, 2026

CVSS v3.1
5.1
EPSS
0%
Percentile
1.0
In the wild
Unconfirmed
What it is

IBM PowerVM Hypervisor FW1120.00 through FW1120.01, FW1110.00 through FW1110.31, FW1060.00 through FW1060.81, and FW950.00 through FW950.H3 is affected by a vulnerability in the RTAS firmware-to-OS interface. An attacker with administrator-level (root) access to a logical partition can send a specially crafted request to partition firmware, causing the partition to crash and become unavailable. Other partitions on the same managed system are not affected.

The record
Technical detail
CVSS v3.1
5.1 · MEDIUM
Vector
CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:N/I:L/A:H
CVSS v4.0
Not supplied
EPSS
0.00105 · 1.0th percentile
Weakness
CWE-129 · Improper Validation of Array Index
Published
2026-09-24T18:17Z
Affected products (34)
ProductVersionsFixed in
ibm/power_system_s1122_\(9824-22a\)_firmware≥ fw1110.00, < fw1110.32fw1110.32
ibm/power_system_s1122_\(9824-22a\)_firmware≥ fw1120.00, < fw1120.02fw1120.02
ibm/power_system_s1124_\(9824-42a\)_firmware≥ fw1110.00, < fw1110.32fw1110.32
ibm/power_system_s1124_\(9824-42a\)_firmware≥ fw1120.00, < fw1120.02fw1120.02
ibm/power_system_s1122s_\(9824-22b\)_firmware≥ fw1110.00, < fw1110.32fw1110.32
ibm/power_system_s1122s_\(9824-22b\)_firmware≥ fw1120.00, < fw1120.02fw1120.02
ibm/power_system_s1114_\(9824-41b\)_firmware≥ fw1110.00, < fw1110.32fw1110.32
ibm/power_system_s1114_\(9824-41b\)_firmware≥ fw1120.00, < fw1120.02fw1120.02
ibm/power_system_l1122_\(9856-22h\)_firmware≥ fw1110.00, < fw1110.32fw1110.32
ibm/power_system_l1122_\(9856-22h\)_firmware≥ fw1120.00, < fw1120.02fw1120.02
ibm/power_system_l1124_\(9856-42h\)_firmware≥ fw1110.00, < fw1110.32fw1110.32
ibm/power_system_l1124_\(9856-42h\)_firmware≥ fw1120.00, < fw1120.02fw1120.02
ibm/power_system_e1150_\(9043-mru\)_firmware≥ fw1110.00, < fw1110.32fw1110.32
ibm/power_system_e1150_\(9043-mru\)_firmware≥ fw1120.00, < fw1120.02fw1120.02
ibm/power_system_s1112_\(9242-21b\)_firmware≥ fw1120.00, < fw1120.02fw1120.02
ibm/power_system_s1112_\(9242-21t\)_firmware≥ fw1120.00, < fw1120.02fw1120.02
ibm/power_system_e1080_\(9080-hex\)_firmware≥ fw1060.00, < fw1060.82fw1060.82
ibm/power_system_s1022_\(9105-22a\)_firmware≥ fw1060.00, < fw1060.82fw1060.82
ibm/power_system_s1024_\(9105-42a\)_firmware≥ fw1060.00, < fw1060.82fw1060.82
ibm/power_system_s1022s_\(9105-22b\)_firmware≥ fw1060.00, < fw1060.82fw1060.82
ibm/power_system_s1014_\(9105-41b\)_firmware≥ fw1060.00, < fw1060.82fw1060.82
ibm/power_system_l1022_\(9786-22h\)_firmware≥ fw1060.00, < fw1060.82fw1060.82
ibm/power_system_l1024_\(9786-42h\)_firmware≥ fw1060.00, < fw1060.82fw1060.82
ibm/power_system_e1050_\(9043-mrx\)_firmware≥ fw1060.00, < fw1060.82fw1060.82
ibm/power_system_s1012_\(9028-21b\)_firmware≥ fw1060.00, < fw1060.82fw1060.82
ibm/power_system_e1180_\(9080-heu\)_firmware≥ fw1110.00, < fw1110.32fw1110.32
ibm/power_system_e1180_\(9080-heu\)_firmware≥ fw1120.00, < fw1120.02fw1120.02
ibm/power_system_s922_\(9009-22g\)_firmware≥ fw950.00, < fw950.h4fw950.h4
ibm/power_system_h922_\(9223-22s\)_firmware≥ fw950.00, < fw950.h4fw950.h4
ibm/power_system_s914_\(9009-41g\)_firmware≥ fw950.00, < fw950.h4fw950.h4
ibm/power_system_s924_\(9009-42g\)_firmware≥ fw950.00, < fw950.h4fw950.h4
ibm/power_system_h924_\(9223-42s\)_firmware≥ fw950.00, < fw950.h4fw950.h4
ibm/power_system_e950_\(9040-mr9\)_firmware≥ fw950.00, < fw950.h4fw950.h4
ibm/power_system_e980_\(9080-m9s\)_firmware≥ fw950.00, < fw950.h4fw950.h4
References (1)
EPSS history
Timeline
  • 26 SEP 03:23Z
    EPSS moved — → 0%
    epss
  • 24 SEP 14:03Z
    This Power System update is being released to address
    cvelistv5