Medium · published August 21, 2026
IBM AIX 7.2, and 7.3 and IBM PowerVM VIOS 4.1 could allow a local attacker to cause kernel memory corruption due to insufficient validation. A crafted filesystem image can trigger an out-of-bounds kernel-stack write during directory reads, causing a system crash or potentially enabling privilege escalation.
| Product | Versions | Fixed in |
|---|---|---|
| ibm/vios | ≥ 4.1.0, < 4.1.0.50 | 4.1.0.50 |
| ibm/vios | ≥ 4.1.1.0, < 4.1.1.30 | 4.1.1.30 |
| ibm/vios | ≥ 4.1.2.0, < 4.1.2.20 | 4.1.2.20 |
| ibm/aix | ≥ 7.2.5, ≤ 7.2.5.212 | — |
| ibm/aix | ≥ 7.3.2, ≤ 7.3.2.5 | — |
| ibm/aix | ≥ 7.3.3, ≤ 7.3.3.2 | — |
| ibm/aix | ≥ 7.3.4, ≤ 7.3.4.1 | — |