{"dataType": "CVE_RECORD", "dataVersion": "5.2", "cveMetadata": {"cveId": "CVE-2026-17042", "assignerOrgId": "9a959283-ebb5-44b6-b705-dcc2bbced522", "state": "PUBLISHED", "assignerShortName": "ibm", "dateReserved": "2026-07-24T12:55:35.930Z", "datePublished": "2026-08-19T19:11:07.905Z", "dateUpdated": "2026-08-19T19:46:38.034Z"}, "containers": {"cna": {"providerMetadata": {"orgId": "9a959283-ebb5-44b6-b705-dcc2bbced522", "shortName": "ibm", "dateUpdated": "2026-08-19T19:46:38.034Z"}, "title": "Power System Out-of-bounds Read", "problemTypes": [{"descriptions": [{"lang": "en", "cweId": "CWE-125", "description": "CWE-125 Out-of-bounds Read", "type": "CWE"}]}], "affected": [{"vendor": "IBM", "product": "Power Systems Firmware", "versions": [{"status": "affected", "version": "FW950.00", "lessThanOrEqual": "FW950.H2", "versionType": "semver"}, {"status": "affected", "version": "OP940.00", "lessThanOrEqual": "OP940.a1", "versionType": "semver"}, {"status": "affected", "version": "OP940.00", "lessThanOrEqual": "OP940.81", "versionType": "semver"}], "cpes": ["cpe:2.3:o:ibm:power_systems_firmware:fw950.00:*:*:*:*:*:*:*", "cpe:2.3:o:ibm:power_systems_firmware:fw950.h2:*:*:*:*:*:*:*", "cpe:2.3:o:ibm:power_systems_firmware:op940.00:*:*:*:*:*:*:*", "cpe:2.3:o:ibm:power_systems_firmware:op940.a1:*:*:*:*:*:*:*"]}], "descriptions": [{"lang": "en", "value": "IBM Power Systems Firmware FW950.00 through FW950.H2, OP940.00 through OP940.a1 (Power9), and OP940.00 - OP940.81 (Power HMC) is affected by a vulnerability in host firmware NVRAM parsing. An attacker with root access to a guest partition on an OpenPOWER system can write a specially crafted NVRAM image, causing the host firmware boot stage to crash with possible memory corruption. This condition persists until operator intervention \u2014 clearing NVRAM via the service processor \u2014 to restore normal operation. This vulnerability only affects OpenPOWER systems; systems running PowerVM are not affected. Successful exploitation results in an integrity and availability impact to the managed system.", "supportingMedia": [{"type": "text/html", "base64": false, "value": "<p>IBM Power Systems Firmware FW950.00 through FW950.H2, OP940.00 through OP940.a1 (Power9), and OP940.00 - OP940.81 (Power HMC) is affected by a vulnerability in host firmware NVRAM parsing. An attacker with root access to a guest partition on an OpenPOWER system can write a specially crafted NVRAM image, causing the host firmware boot stage to crash with possible memory corruption. This condition persists until operator intervention \u2014 clearing NVRAM via the service processor \u2014 to restore normal operation. This vulnerability only affects OpenPOWER systems; systems running PowerVM are not affected. Successful exploitation results in an integrity and availability impact to the managed system.</p>"}]}], "references": [{"url": "https://www.ibm.com/support/pages/node/7283240", "tags": ["vendor-advisory", "patch"]}], "metrics": [{"format": "CVSS", "scenarios": [{"lang": "en", "value": "GENERAL"}], "cvssV3_1": {"version": "3.1", "attackVector": "LOCAL", "attackComplexity": "LOW", "privilegesRequired": "LOW", "userInteraction": "NONE", "scope": "CHANGED", "confidentialityImpact": "NONE", "integrityImpact": "LOW", "availabilityImpact": "HIGH", "baseSeverity": "HIGH", "baseScore": 7.3, "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:N/I:L/A:H"}}], "solutions": [{"lang": "en", "value": "Customers with the products below should install FW950.H3(950_230) or newer to remediate this vulnerability.\nPower 9\n\n * IBM Power System S922 (9009-22G)\n * IBM Power System H922 (9223-22S)\n * IBM Power System S914 (9009-41G)\n * IBM Power System S924 (9009-42G)\n * IBM Power System H924 (9223-42S)\n * IBM Power System E950 (9040-MR9)\n * IBM Power System E980 (9080-M9S)\n\n\nCustomers with the products below should install OP940.a2 or newer to remediate this vulnerability.\nPower 9\n\n * IBM Power System AC922\u00a0(8335-GTH, 8335-GTX)\n\n\nCustomers with the products below should install OP940.82 or newer to remediate this vulnerability.\nPower Hardware Management Console\n\n * IBM Power Hardware Management Console (7063-CR2)\n\n\nThe images mentioned above can be located at IBM Fix Central : https://www.ibm.com/support/fixcentral/ https://www.ibm.com/support/fixcentral/", "supportingMedia": [{"type": "text/html", "base64": false, "value": "<p>Customers with the products below should install FW950.H3(950_230) or newer to remediate this vulnerability.<br/>Power 9</p><ol><li>IBM Power System S922 (9009-22G)</li><li>IBM Power System H922 (9223-22S)</li><li>IBM Power System S914 (9009-41G)</li><li>IBM Power System S924 (9009-42G)</li><li>IBM Power System H924 (9223-42S)</li><li>IBM Power System E950 (9040-MR9)</li><li>IBM Power System E980 (9080-M9S)</li></ol><p>Customers with the products below should install OP940.a2 or newer to remediate this vulnerability.<br/>Power 9</p><ol><li>IBM Power System AC922\u00a0(8335-GTH, 8335-GTX)</li></ol><p>Customers with the products below should install OP940.82 or newer to remediate this vulnerability.<br/>Power Hardware Management Console</p><ol><li>IBM Power Hardware Management Console (7063-CR2)</li></ol><p><em>The images mentioned above can be located at IBM Fix Central : </em><a href=\"https://www.ibm.com/support/fixcentral/\" rel=\"noopener noreferrer nofollow\"><em>https://www.ibm.com/support/fixcentral/</em></a></p>"}]}]}, "adp": [{"metrics": [{"other": {"type": "ssvc", "content": {"timestamp": "2026-08-19T19:24:22.753664Z", "id": "CVE-2026-17042", "options": [{"Exploitation": "none"}, {"Automatable": "no"}, {"Technical Impact": "partial"}], "role": "CISA Coordinator", "version": "2.0.3"}}}], "title": "CISA ADP Vulnrichment", "providerMetadata": {"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "shortName": "CISA-ADP", "dateUpdated": "2026-08-19T19:24:36.200Z"}}]}}

{"dataType": "CVE_RECORD", "containers": {"adp": [{"title": "CISA ADP Vulnrichment", "metrics": [{"other": {"type": "ssvc", "content": {"id": "CVE-2026-17042", "role": "CISA Coordinator", "options": [{"Exploitation": "none"}, {"Automatable": "no"}, {"Technical Impact": "partial"}], "version": "2.0.3", "timestamp": "2026-08-19T19:24:22.753664Z"}}}], "providerMetadata": {"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "shortName": "CISA-ADP", "dateUpdated": "2026-08-19T19:24:33.411Z"}}], "cna": {"title": "Power System Out-of-bounds Read", "metrics": [{"format": "CVSS", "cvssV3_1": {"scope": "CHANGED", "version": "3.1", "baseScore": 7.3, "attackVector": "LOCAL", "baseSeverity": "HIGH", "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:N/I:L/A:H", "integrityImpact": "LOW", "userInteraction": "NONE", "attackComplexity": "LOW", "availabilityImpact": "HIGH", "privilegesRequired": "LOW", "confidentialityImpact": "NONE"}, "scenarios": [{"lang": "en", "value": "GENERAL"}]}], "affected": [{"cpes": ["cpe:2.3:o:ibm:power_systems_firmware:fw950.00:*:*:*:*:*:*:*", "cpe:2.3:o:ibm:power_systems_firmware:fw950.h2:*:*:*:*:*:*:*", "cpe:2.3:o:ibm:power_systems_firmware:op940.00:*:*:*:*:*:*:*", "cpe:2.3:o:ibm:power_systems_firmware:op940.a1:*:*:*:*:*:*:*"], "vendor": "IBM", "product": "Power Systems Firmware", "versions": [{"status": "affected", "version": "FW950.00", "versionType": "semver", "lessThanOrEqual": "FW950.H2"}, {"status": "affected", "version": "OP940.00", "versionType": "semver", "lessThanOrEqual": "OP940.a1"}, {"status": "affected", "version": "OP940.00", "versionType": "semver", "lessThanOrEqual": "OP940.81"}]}], "solutions": [{"lang": "en", "value": "Customers with the products below should install FW950.H3(950_230) or newer to remediate this vulnerability.\nPower 9\n\n * IBM Power System S922 (9009-22G)\n * IBM Power System H922 (9223-22S)\n * IBM Power System S914 (9009-41G)\n * IBM Power System S924 (9009-42G)\n * IBM Power System H924 (9223-42S)\n * IBM Power System E950 (9040-MR9)\n * IBM Power System E980 (9080-M9S)\n\n\nCustomers with the products below should install OP940.a2 or newer to remediate this vulnerability.\nPower 9\n\n * IBM Power System AC922\u00a0(8335-GTH, 8335-GTX)\n\n\nCustomers with the products below should install OP940.82 or newer to remediate this vulnerability.\nPower Hardware Management Console\n\n * IBM Power Hardware Management Console (7063-CR2)\n\n\nThe images mentioned above can be located at IBM Fix Central : https://www.ibm.com/support/fixcentral/ https://www.ibm.com/support/fixcentral/", "supportingMedia": [{"type": "text/html", "value": "<p>Customers with the products below should install FW950.H3(950_230) or newer to remediate this vulnerability.<br/>Power 9</p><ol><li>IBM Power System S922 (9009-22G)</li><li>IBM Power System H922 (9223-22S)</li><li>IBM Power System S914 (9009-41G)</li><li>IBM Power System S924 (9009-42G)</li><li>IBM Power System H924 (9223-42S)</li><li>IBM Power System E950 (9040-MR9)</li><li>IBM Power System E980 (9080-M9S)</li></ol><p>Customers with the products below should install OP940.a2 or newer to remediate this vulnerability.<br/>Power 9</p><ol><li>IBM Power System AC922\u00a0(8335-GTH, 8335-GTX)</li></ol><p>Customers with the products below should install OP940.82 or newer to remediate this vulnerability.<br/>Power Hardware Management Console</p><ol><li>IBM Power Hardware Management Console (7063-CR2)</li></ol><p><em>The images mentioned above can be located at IBM Fix Central : </em><a href=\"https://www.ibm.com/support/fixcentral/\" rel=\"noopener noreferrer nofollow\"><em>https://www.ibm.com/support/fixcentral/</em></a></p>", "base64": false}]}], "references": [{"url": "https://www.ibm.com/support/pages/node/7283240", "tags": ["vendor-advisory", "patch"]}], "descriptions": [{"lang": "en", "value": "IBM Power Systems Firmware FW950.00 through FW950.H2, OP940.00 through OP940.a1 (Power9), and OP940.00 - OP940.81 (Power HMC) is affected by a vulnerability in host firmware NVRAM parsing. An attacker with root access to a guest partition on an OpenPOWER system can write a specially crafted NVRAM image, causing the host firmware boot stage to crash with possible memory corruption. This condition persists until operator intervention \u2014 clearing NVRAM via the service processor \u2014 to restore normal operation. This vulnerability only affects OpenPOWER systems; systems running PowerVM are not affected. Successful exploitation results in an integrity and availability impact to the managed system.", "supportingMedia": [{"type": "text/html", "value": "<p>IBM Power Systems Firmware FW950.00 through FW950.H2, OP940.00 through OP940.a1 (Power9), and OP940.00 - OP940.81 (Power HMC) is affected by a vulnerability in host firmware NVRAM parsing. An attacker with root access to a guest partition on an OpenPOWER system can write a specially crafted NVRAM image, causing the host firmware boot stage to crash with possible memory corruption. This condition persists until operator intervention \u2014 clearing NVRAM via the service processor \u2014 to restore normal operation. This vulnerability only affects OpenPOWER systems; systems running PowerVM are not affected. Successful exploitation results in an integrity and availability impact to the managed system.</p>", "base64": false}]}], "problemTypes": [{"descriptions": [{"lang": "en", "type": "CWE", "cweId": "CWE-125", "description": "CWE-125 Out-of-bounds Read"}]}], "providerMetadata": {"orgId": "9a959283-ebb5-44b6-b705-dcc2bbced522", "shortName": "ibm", "dateUpdated": "2026-08-19T19:46:38.034Z"}}}, "cveMetadata": {"cveId": "CVE-2026-17042", "state": "PUBLISHED", "dateUpdated": "2026-08-19T19:46:38.034Z", "dateReserved": "2026-07-24T12:55:35.930Z", "assignerOrgId": "9a959283-ebb5-44b6-b705-dcc2bbced522", "datePublished": "2026-08-19T19:11:07.905Z", "assignerShortName": "ibm"}, "dataVersion": "5.2"}

{"affected": [{"affectedData": [{"cpes": ["cpe:2.3:o:ibm:power_systems_firmware:fw950.00:*:*:*:*:*:*:*", "cpe:2.3:o:ibm:power_systems_firmware:fw950.h2:*:*:*:*:*:*:*", "cpe:2.3:o:ibm:power_systems_firmware:op940.00:*:*:*:*:*:*:*", "cpe:2.3:o:ibm:power_systems_firmware:op940.a1:*:*:*:*:*:*:*"], "product": "Power Systems Firmware", "vendor": "IBM", "versions": [{"lessThanOrEqual": "FW950.H2", "status": "affected", "version": "FW950.00", "versionType": "semver"}, {"lessThanOrEqual": "OP940.a1", "status": "affected", "version": "OP940.00", "versionType": "semver"}, {"lessThanOrEqual": "OP940.81", "status": "affected", "version": "OP940.00", "versionType": "semver"}]}], "source": "psirt@us.ibm.com"}], "cveTags": [], "descriptions": [{"lang": "en", "value": "IBM Power Systems Firmware FW950.00 through FW950.H2, OP940.00 through OP940.a1 (Power9), and OP940.00 - OP940.81 (Power HMC) is affected by a vulnerability in host firmware NVRAM parsing. An attacker with root access to a guest partition on an OpenPOWER system can write a specially crafted NVRAM image, causing the host firmware boot stage to crash with possible memory corruption. This condition persists until operator intervention \u2014 clearing NVRAM via the service processor \u2014 to restore normal operation. This vulnerability only affects OpenPOWER systems; systems running PowerVM are not affected. Successful exploitation results in an integrity and availability impact to the managed system."}], "id": "CVE-2026-17042", "lastModified": "2026-08-19T20:17:12.127", "metrics": {"cvssMetricV31": [{"cvssData": {"attackComplexity": "LOW", "attackVector": "LOCAL", "availabilityImpact": "HIGH", "baseScore": 7.3, "baseSeverity": "HIGH", "confidentialityImpact": "NONE", "integrityImpact": "LOW", "privilegesRequired": "LOW", "scope": "CHANGED", "userInteraction": "NONE", "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:N/I:L/A:H", "version": "3.1"}, "exploitabilityScore": 2.0, "impactScore": 4.7, "source": "psirt@us.ibm.com", "type": "Primary"}], "ssvcV203": [{"source": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "ssvcData": {"id": "CVE-2026-17042", "options": [{"exploitation": "none"}, {"automatable": "no"}, {"technicalImpact": "partial"}], "role": "CISA Coordinator", "timestamp": "2026-08-19T19:24:22.753664Z", "version": "2.0.3"}}]}, "published": "2026-08-19T20:17:12.127", "references": [{"source": "psirt@us.ibm.com", "url": "https://www.ibm.com/support/pages/node/7283240"}], "sourceIdentifier": "psirt@us.ibm.com", "vulnStatus": "Received", "weaknesses": [{"description": [{"lang": "en", "value": "CWE-125"}], "source": "psirt@us.ibm.com", "type": "Primary"}]}

{}

{}