CVE-2026-19442

Published: Aug 20, 2026Modified: Aug 25, 2026

8.8

Vector

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H

Exploitability: 2.0 / Impact: 6.0

Source: NVD

Description

IBM AIX 7.2, and 7.3 and IBM PowerVM VIOS 4.1 has a pointer validation flaw exists in the AIX Virtual SCSI (vSCSI) initiator driver. Successful exploitation may result in denial of service, privilege escalation, or full compromise of the client LPAR kernel.

Affected (7)

Products: Ibm: Vios, Aix

2 products

Configuration A

3 vulnerable

Vulnerable Software	Affected Versions
Ibm Vios	From 4.1.0 to 4.1.0.50
Ibm Vios	From 4.1.1.0 to 4.1.1.30
Ibm Vios	From 4.1.2.0 to 4.1.2.20

Configuration B

4 vulnerable

Vulnerable Software	Affected Versions
Ibm Aix	From 7.2.5 to 7.2.5.212
Ibm Aix	From 7.3.2 to 7.3.2.5
Ibm Aix	From 7.3.3 to 7.3.3.2
Ibm Aix	From 7.3.4 to 7.3.4.1

Related CWEs

Untrusted Pointer Dereference

The product obtains a value from an untrusted source, converts this value to a pointer, and dereferences the resulting pointer.

References (1)

https://www.ibm.com/support/pages/node/7283858

Source: psirt@us.ibm.com

PatchVendor Advisory

Timeline

No history available yet.