EUVD-2026-62746
GHSA-6rxg-jgxq-pq8f
Severity by source
AV:A/AC:L/PR:N/UI:N/S:C/C:N/I:N/A:H
Adjacent vector confirmed by nature of network-triggered DoS; S:C reflects VIOS crash cascading to hosted LPARs; pure availability impact with no confidentiality or integrity effect.
Primary rating from Vendor (ibm).
CVSS VectorVendor: ibm
Lifecycle Timeline
2DescriptionCVE.org
IBM AIX 7.2, and 7.3 and IBM PowerVM VIOS 4.1 could allow a remote attacker to cause a denial of service due to a use-after-free.
AnalysisAI
Denial of service via use-after-free in IBM AIX 7.2 and 7.3 and IBM PowerVM VIOS 4.1 allows an unauthenticated attacker on an adjacent network to crash affected systems by triggering a memory corruption condition. The scope change (S:C) in the CVSS vector is significant in virtualization contexts: a successful attack against PowerVM VIOS could cascade to hosted virtual machines, amplifying the availability impact beyond the directly targeted component. No public exploit code or active exploitation has been identified at time of analysis; a vendor patch is available.
Technical ContextAI
CWE-416 (Use After Free) describes a class of memory safety flaws where a program continues to reference memory after it has been freed, allowing an attacker to influence the subsequent state of that memory and trigger undefined behavior. In IBM AIX - IBM's enterprise UNIX platform - and PowerVM VIOS (the Virtual I/O Server component of IBM's PowerVM hypervisor stack), this flaw exists in a remotely reachable code path accessible from the adjacent network. CPE strings cpe:2.3:a:ibm:aix:*:*:*:*:*:*:*:* and cpe:2.3:a:ibm:powervm_vios:*:*:*:*:*:*:*:* confirm both the AIX operating system and the VIOS virtualization layer are independently affected product lines. The VIOS component is particularly sensitive because it mediates I/O for all client LPARs (logical partitions), meaning a VIOS crash can deny I/O access to all hosted virtual machines on that physical server.
RemediationAI
IBM has released a patch, available via the official advisory at https://www.ibm.com/support/pages/node/7283858. Organizations should apply this fix immediately, prioritizing systems where VIOS is exposed to shared network segments or where AIX systems are reachable from untrusted adjacent hosts. No exact patched version number was included in the provided data; confirm the target fix level directly from the IBM advisory before deployment. As an interim compensating control, restrict network adjacency to AIX and VIOS management interfaces using VLAN segmentation or host-based firewall rules (AIX's ipfilter or iptables equivalent) to limit which hosts can reach the vulnerable service, accepting the trade-off that management access will also be restricted. Do not rely on upstream VPNs or perimeter firewalls alone if internal lateral movement from a compromised adjacent host is in scope for your threat model.
The SSL protocol 3.0, as used in OpenSSL through 1.0.1i and other products, uses nondeterministic CBC padding, which mak
Multiple unspecified vulnerabilities in the InfiniBand subsystem in IBM AIX 6.1 and 7.1, and VIOS 2.2.2.2-FP-26 SP-02, a
IBM AIX 7.1, 7.2, 7.3, and VIOS 3.1 could allow a non-privileged local user to exploit a vulnerability in the invscout c
IBM AIX contains an unspecified vulnerability that would allow a locally authenticated user to obtain root level privile
IBM AIX 5.3, 6.1, 7.1, and 7.2 contains an unspecified vulnerability that would allow a locally authenticated user to ob
IBM AIX 6.1, 7.1, and 7.2 could allow a local user to gain root privileges using a specially crafted command within the
lquerylv in cmdlvm in IBM AIX 5.3, 6.1, and 7.1 and VIOS 2.2.x allows local users to gain privileges via a crafted DBGCM
libodm.a in IBM AIX 5.3, 6.1, and 7.1 allows local users to overwrite arbitrary files via a symlink attack on a temporar
libodm.a in IBM AIX 6.1 and 7.1, and VIOS 2.2.x, allows local users to overwrite arbitrary files via a symlink attack on
OS command injection in IBM AIX 7.2 and 7.3 and PowerVM VIOS 4.1 lets a remote, low-privileged authenticated attacker ru
OS command injection in IBM AIX 7.2 and 7.3 and in IBM PowerVM VIOS 4.1 lets a remote, authenticated attacker execute ar
OS command injection in IBM AIX 7.2/7.3 and PowerVM VIOS 4.1 lets a remote authenticated attacker run arbitrary commands
Same weakness CWE-416 – Use After Free
View allSame technique Denial Of Service
View allShare
External POC / Exploit Code
Leaving vuln.today