IBM PowerVM Hypervisor FW1120.00-FW950.H3 Boot Config Integrity Flaw
CVE-2026-17503 Published on September 24, 2026
This Power System update is being released to address
IBM PowerVM Hypervisor FW1120.00 through FW1120.01, FW1110.00 through FW1110.31, FW1060.00 through FW1060.81, and FW950.00 through FW950.H3 is affected by a vulnerability in the partition firmware runtime boot configuration. An attacker with root access to a partition can maliciously alter partition nvram, causing the partition to fail to boot. This condition persists until operator intervention deleting and recreating the partition configuration to restore normal operation. Successful exploitation results in an integrity and availability impact.
Vulnerability Analysis
CVE-2026-17503 can be exploited with local system access, and requires user privileges. This vulnerability is considered to have a low attack complexity. The potential impact of an exploit of this vulnerability is considered to have no impact on confidentiality, with no impact on integrity, and a high impact on availability.
Weakness Type
Improper Input Validation
The product receives input or data, but it does not validate or incorrectly validates that the input has the properties that are required to process the data safely and correctly.
Products Associated with CVE-2026-17503
Want to know whenever a new CVE is published for IBM Powervm Hypervisor? stack.watch will email you.
Affected Versions
IBM PowerVM Hypervisor:- Version FW1120.00, <= FW1120.01 is affected.
- Version FW1110.00, <= FW1110.31 is affected.
- Version FW1060.00, <= FW1060.81 is affected.
- Version FW950.00, <= FW950.H3 is affected.
Exploit Probability
EPSS (Exploit Prediction Scoring System) scores estimate the probability that a vulnerability will be exploited in the wild within the next 30 days. The percentile shows you how this score compares to all other vulnerabilities.