EUVD-2026-62736
GHSA-373j-r8x5-fj8c
Severity by source
AV:A/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
Adjacent network vector aligns with IBM's own assessment; unauthenticated null pointer dereference produces only a crash with no confidentiality or integrity impact.
Primary rating from Vendor (ibm).
CVSS VectorVendor: ibm
Lifecycle Timeline
2DescriptionCVE.org
IBM AIX 7.2, and 7.3 and IBM PowerVM VIOS 4.1 could allow a remote attacker to cause a denial of service due to a null pointer dereference.
AnalysisAI
Denial of service in IBM AIX 7.2 and 7.3 and PowerVM VIOS 4.1 is achievable by an adjacent-network attacker exploiting a null pointer dereference, capable of crashing the targeted system without requiring authentication or user interaction. The vulnerability affects IBM's enterprise UNIX operating system and its PowerVM Virtual I/O Server layer, where availability is operationally critical for hosted workloads. No public exploit code has been identified at time of analysis, and IBM has released a remediation patch via official advisory.
Technical ContextAI
IBM AIX is a proprietary UNIX-based operating system (CPE: cpe:2.3:a:ibm:aix:*:*:*:*:*:*:*:*) widely deployed in enterprise, financial, and government sectors. PowerVM VIOS (Virtual I/O Server, CPE: cpe:2.3:a:ibm:powervm_vios:*:*:*:*:*:*:*:*) is the virtualization I/O management layer underpinning IBM's PowerVM hypervisor environments, brokering storage and network I/O for logical partitions. CWE-476 (Null Pointer Dereference) identifies the root cause class: a code path dereferences a pointer that has not been validated as non-NULL prior to use, producing an unhandled memory fault that crashes the affected process or kernel context. In AIX and VIOS, such a crash can terminate the operating system or the virtualization control plane entirely, causing loss of availability for all workloads hosted on the affected system. The adjacent network attack vector (AV:A) indicates the triggering input must originate from the same local network segment, subnet, or VLAN as the target - not from the open internet - suggesting the vulnerable code path is exposed through a network-facing service or protocol listener accessible at Layer 2 proximity.
RemediationAI
The primary remediation is to apply the vendor-released patch referenced in the IBM support advisory at https://www.ibm.com/support/pages/node/7283858; exact fix version numbers should be obtained directly from that advisory, as they are not independently confirmed in the available intelligence. Until the patch can be applied, the adjacent network attack vector (AV:A) makes network segmentation the most effective compensating control: isolating IBM AIX and PowerVM VIOS management and data interfaces to dedicated VLANs with ingress access-control lists restricting traffic to trusted management hosts and subnets substantially raises the bar for exploitation. Implementing host-based firewall rules on AIX (via the native ipfilter facility) to limit inbound connections to known administrative sources provides an additional layer of defense. Note that these network controls reduce reachability but do not eliminate the vulnerability - the IBM patch remains the definitive fix, and controls should be treated as temporary mitigations only.
The SSL protocol 3.0, as used in OpenSSL through 1.0.1i and other products, uses nondeterministic CBC padding, which mak
Multiple unspecified vulnerabilities in the InfiniBand subsystem in IBM AIX 6.1 and 7.1, and VIOS 2.2.2.2-FP-26 SP-02, a
IBM AIX 7.1, 7.2, 7.3, and VIOS 3.1 could allow a non-privileged local user to exploit a vulnerability in the invscout c
IBM AIX contains an unspecified vulnerability that would allow a locally authenticated user to obtain root level privile
IBM AIX 5.3, 6.1, 7.1, and 7.2 contains an unspecified vulnerability that would allow a locally authenticated user to ob
IBM AIX 6.1, 7.1, and 7.2 could allow a local user to gain root privileges using a specially crafted command within the
lquerylv in cmdlvm in IBM AIX 5.3, 6.1, and 7.1 and VIOS 2.2.x allows local users to gain privileges via a crafted DBGCM
libodm.a in IBM AIX 5.3, 6.1, and 7.1 allows local users to overwrite arbitrary files via a symlink attack on a temporar
libodm.a in IBM AIX 6.1 and 7.1, and VIOS 2.2.x, allows local users to overwrite arbitrary files via a symlink attack on
OS command injection in IBM AIX 7.2 and 7.3 and PowerVM VIOS 4.1 lets a remote, low-privileged authenticated attacker ru
OS command injection in IBM AIX 7.2 and 7.3 and in IBM PowerVM VIOS 4.1 lets a remote, authenticated attacker execute ar
OS command injection in IBM AIX 7.2/7.3 and PowerVM VIOS 4.1 lets a remote authenticated attacker run arbitrary commands
Same weakness CWE-476 – NULL Pointer Dereference
View allSame technique Denial Of Service
View allShare
External POC / Exploit Code
Leaving vuln.today