EUVD-2026-62717
GHSA-xpr3-qcjq-5q6q
Severity by source
AV:A/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H
Adjacent vector and high complexity match vendor-assigned metrics; PR:N confirmed since no credential is needed; only availability is impacted by the DoS crash with no scope change.
Primary rating from Vendor (ibm).
CVSS VectorVendor: ibm
Lifecycle Timeline
2DescriptionCVE.org
IBM AIX 7.2, and 7.3 and IBM PowerVM VIOS 4.1 could allow a remote attacker to cause a denial of service due to a NULL pointer dereference.
AnalysisAI
Denial of service in IBM AIX 7.2/7.3 and PowerVM VIOS 4.1 is achievable by an adjacent-network attacker through a NULL pointer dereference in a network-handling code path. Exploitation requires no authentication but demands high attack complexity, substantially limiting opportunistic or internet-scale attacks. IBM has released a patch via its official support portal; no public exploit code or CISA KEV listing has been identified at time of analysis.
Technical ContextAI
IBM AIX is a Unix-derived operating system for IBM POWER hardware, and PowerVM VIOS (Virtual I/O Server) is the virtualization layer underpinning IBM Power Systems logical partition management. CWE-476 (NULL Pointer Dereference) describes a memory-safety flaw in which code dereferences a pointer without first validating it is non-null, causing a kernel panic or service crash. The CVSS adjacent-network vector (AV:A) indicates that triggering traffic must originate from the same network segment, subnet, or logical broadcast domain - not the open internet - consistent with a flaw in a protocol stack or network service that processes frames before authentication. Affected CPEs are cpe:2.3:a:ibm:aix:*:*:*:*:*:*:*:* and cpe:2.3:a:ibm:powervm_vios:*:*:*:*:*:*:*:*, confirming both AIX and VIOS product lines are in scope.
RemediationAI
IBM has released a patch addressing this vulnerability; retrieve the specific APAR number, fileset, or interim fix applicable to AIX 7.2, AIX 7.3, and PowerVM VIOS 4.1 directly from the vendor advisory at https://www.ibm.com/support/pages/node/7283858, and apply it following standard IBM AIX maintenance procedures. If immediate patching is not feasible, restrict adjacent-network access to affected POWER system interfaces using Layer 2 segmentation, VLAN isolation, or host-based firewall rules that permit only trusted management hosts to send traffic to the exposed network stack - this reduces the attacker's ability to reach the vulnerable code path. Note that network-level controls are compensating mitigations only and do not eliminate the vulnerability; they also carry the risk of inadvertently blocking legitimate storage, HMC management, or inter-LPAR traffic if ACLs are not carefully scoped. VIOS systems warrant priority attention given their role as the shared I/O hypervisor layer for all hosted logical partitions.
The SSL protocol 3.0, as used in OpenSSL through 1.0.1i and other products, uses nondeterministic CBC padding, which mak
Multiple unspecified vulnerabilities in the InfiniBand subsystem in IBM AIX 6.1 and 7.1, and VIOS 2.2.2.2-FP-26 SP-02, a
IBM AIX 7.1, 7.2, 7.3, and VIOS 3.1 could allow a non-privileged local user to exploit a vulnerability in the invscout c
IBM AIX contains an unspecified vulnerability that would allow a locally authenticated user to obtain root level privile
IBM AIX 5.3, 6.1, 7.1, and 7.2 contains an unspecified vulnerability that would allow a locally authenticated user to ob
IBM AIX 6.1, 7.1, and 7.2 could allow a local user to gain root privileges using a specially crafted command within the
lquerylv in cmdlvm in IBM AIX 5.3, 6.1, and 7.1 and VIOS 2.2.x allows local users to gain privileges via a crafted DBGCM
libodm.a in IBM AIX 5.3, 6.1, and 7.1 allows local users to overwrite arbitrary files via a symlink attack on a temporar
libodm.a in IBM AIX 6.1 and 7.1, and VIOS 2.2.x, allows local users to overwrite arbitrary files via a symlink attack on
OS command injection in IBM AIX 7.2 and 7.3 and PowerVM VIOS 4.1 lets a remote, low-privileged authenticated attacker ru
OS command injection in IBM AIX 7.2 and 7.3 and in IBM PowerVM VIOS 4.1 lets a remote, authenticated attacker execute ar
OS command injection in IBM AIX 7.2/7.3 and PowerVM VIOS 4.1 lets a remote authenticated attacker run arbitrary commands
Same weakness CWE-476 – NULL Pointer Dereference
View allSame technique Denial Of Service
View allShare
External POC / Exploit Code
Leaving vuln.today