CVE-2025-36035

Published: Sep 14, 2025Modified: Jun 17, 2026

5.1

Vector

CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:L/I:N/A:H

Exploitability: 0.8 / Impact: 4.2

Source: NVD

Description

IBM PowerVM Hypervisor FW950.00 through FW950.E0, FW1050.00 through FW1050.50, and FW1060.00 through FW1060.40 could allow a local privileged user to cause a denial of service by issuing a specially crafted IBM i hypervisor call that would disclose memory contents or consume excessive memory resources.

Affected (3)

Products: Ibm: Powervm Hypervisor

Ibm

1 product

Powervm Hypervisor

Configuration A

1 vulnerable · 13 platform

Vulnerable Software	Affected Versions
Ibm Powervm Hypervisor	From FW950.00 to FW950.E0

Running on/with	Platform Versions
Ibm Power System E950 (9040 Mr9)	All versions
Ibm Power System E980 (9080 M9s)	All versions
Ibm Power System H922 (9223 22h)	All versions
Ibm Power System H922 (9223 22s)	All versions
Ibm Power System H924 ((9223 42s)	All versions
Ibm Power System H924 (9223 42h)	All versions
Ibm Power System L922 (9008 22l)	All versions
Ibm Power System S914 (9009 41a)	All versions
Ibm Power System S914 (9009 41g)	All versions
Ibm Power System S922 (9009 22a)	All versions
Ibm Power System S922 (9009 22g)	All versions
Ibm Power System S924 (9009 42a)	All versions
Ibm Power System S924 (9009 42g)	All versions

Configuration B

1 platform

Running on/with	Platform Versions
Ibm Power System E1080 (9080 Hex)	All versions

Configuration C

2 vulnerable · 8 platform

Vulnerable Software	Affected Versions
Ibm Powervm Hypervisor	From FW1050.00 to FW1050.50
Ibm Powervm Hypervisor	From FW1060.00 to FW1060.40

Running on/with	Platform Versions
Ibm Power System E1050 (9043 Mrx)	All versions
Ibm Power System L1022 (9786 22h)	All versions
Ibm Power System L1024 (9786 42h)	All versions
Ibm Power System S1012 (9028 21b)	All versions
Ibm Power System S1014 (9105 41b)	All versions
Ibm Power System S1022 (9105 22a)	All versions
Ibm Power System S1022s (9105 22b)	All versions
Ibm Power System S1024 (9105 42a)	All versions

Related CWEs

CWE-770

Allocation of Resources Without Limits or Throttling

The product allocates a reusable resource or group of resources on behalf of an actor without imposing any restrictions on the size or number of resources that can be allocated, in violation of the intended security policy for that actor.

References (1)

https://www.ibm.com/support/pages/node/7244813

Source: psirt@us.ibm.com

Vendor Advisory

Timeline

No history available yet.