IBM AIX CVE-2026-17165

No authentication or user interaction is required per the CVSS vector (AV:N/AC:L/PR:N/UI:N/S:U) - remote unauthenticated exploitation is possible against a network-accessible service on IBM AIX 7.2/7.3 or PowerVM VIOS 4.1. However, the specific network service, daemon, port, or protocol that hosts the vulnerable code path is NOT identified in any available intelligence source, which is a critical gap that limits practical exploitation without additional vendor disclosure or independent analysis. Impact is strictly confined to availability (C:N/I:N/A:H); an attacker cannot escalate to code execution or access data through this vulnerability alone. Systems that do not expose the affected service to untrusted networks, or where the AIX/VIOS management interfaces are isolated on a dedicated management network, face significantly reduced practical risk.

The CVSS 7.5 High score is driven entirely by full availability impact (A:H) against a network-accessible, unauthenticated, low-complexity attack path - this is a crash-on-demand scenario if the vulnerable service is reachable. Real-world risk is moderated by several factors: AIX and VIOS systems are typically deployed in network-segregated enterprise or data-center environments rather than exposed directly to the internet; no EPSS probability data was provided, preventing probabilistic exploitation forecasting; no public exploit or POC has been identified; and no CISA KEV listing exists. Impact is strictly operational - no lateral movement, data theft, or code execution follows from this flaw alone. Organizations running internet-facing or externally accessible IBM AIX network services should treat this with elevated urgency; air-gapped and internally segmented deployments face substantially reduced near-term risk. The absence of CPE data and specific service identification is a notable intelligence gap that limits precise blast-radius assessment.

An unauthenticated remote attacker sends a specially crafted network packet or malformed request to a vulnerable network-exposed service on an IBM AIX 7.x or PowerVM VIOS 4.1 system, triggering a NULL pointer dereference that causes the targeted service or underlying system to crash. No public exploit code has been identified; the CVSS AC:L rating suggests the triggering condition is mechanically straightforward once the specific service and malformed input format are known, but the undisclosed service identity currently limits practical exploitation.