CVE-2026-17413 is a vulnerability in IBM Powervm Hypervisor
Published on September 24, 2026
This Power System update is being released to address
IBM PowerVM Hypervisor FW1120.00 through FW1120.01, FW1110.00 through FW1110.31, FW1060.00 through FW1060.81, and FW950.00 through FW950.H3 is affected by a vulnerability in the RTAS firmware-to-OS interface. An attacker with administrator-level (root) access to a logical partition can send a specially crafted request to partition firmware, causing the partition to crash and become unavailable. Other partitions on the same managed system are not affected.
Vulnerability Analysis
CVE-2026-17413 can be exploited with local system access, and requires user privileges. This vulnerability is considered to have a low attack complexity. The potential impact of an exploit of this vulnerability is considered to have no impact on confidentiality, with no impact on integrity, and a high impact on availability.
Weakness Type
What is an out-of-bounds array index Vulnerability?
The product uses untrusted input when calculating or using an array index, but the product does not validate or incorrectly validates the index to ensure the index references a valid position within the array.
CVE-2026-17413 has been classified to as an out-of-bounds array index vulnerability or weakness.
Products Associated with CVE-2026-17413
Want to know whenever a new CVE is published for IBM Powervm Hypervisor? stack.watch will email you.
Affected Versions
IBM PowerVM Hypervisor:- Version FW1120.00, <= FW1120.01 is affected.
- Version FW1110.00, <= FW1110.31 is affected.
- Version FW1060.00, <= FW1060.81 is affected.
- Version FW950.00, <= FW950.H3 is affected.