IBM PowerVM Hypervisor FW950.00 through FW950.E0, FW1050.00 through FW1050.50, and FW1060.00 through FW1060.40 could allow a local privileged user to cause a denial of service by issuing a specially crafted IBM i hypervisor call that would disclose memory contents or consume excessive memory resources.

Metrics

No CVSS v4.0

Attack Vector Local

Attack Complexity Low

Privileges Required High

Scope Changed

Confidentiality Impact Low

Integrity Impact None

Availability Impact High

User Interaction None

No CVSS v3.0

No CVSS v2

This CVE is not in the KEV list.

The EPSS score is 0.00017.

Exploitation none

Automatable no

Technical Impact partial

Affected Vendors & Products

Vendors Products
Ibm Subscribe
Power9 System Firmware Subscribe
Power System E1050 \(9043-mrx\) Subscribe
Power System E1080 \(9080-hex\) Subscribe
Power System E950 \(9040-mr9\) Subscribe
Power System E980 \(9080-m9s\) Subscribe
Power System H922 \(9223-22h\) Subscribe
Power System H922 \(9223-22s\) Subscribe
Power System H924 \(9223-42h\) Subscribe
Power System H924 \(\(9223-42s\) Subscribe
Power System L1022 \(9786-22h\) Subscribe
Power System L1024 \(9786-42h\) Subscribe
Power System L922 \(9008-22l\) Subscribe
Power System S1012 \(9028-21b\) Subscribe
Power System S1014 \(9105-41b\) Subscribe
Power System S1022 \(9105-22a\) Subscribe
Power System S1022s \(9105-22b\) Subscribe
Power System S1024 \(9105-42a\) Subscribe
Power System S914 \(9009-41a\) Subscribe
Power System S914 \(9009-41g\) Subscribe
Power System S922 \(9009-22a\) Subscribe
Power System S922 \(9009-22g\) Subscribe
Power System S924 \(9009-42a\) Subscribe
Power System S924 \(9009-42g\) Subscribe
Powervm Hypervisor Subscribe

Configuration 1 [-]

AND
cpe:2.3:o:ibm:powervm_hypervisor:*:*:*:*:*:*:*:*
OR cpe:2.3:h:ibm:power_system_e950_\(9040-mr9\):-:*:*:*:*:*:*:*
cpe:2.3:h:ibm:power_system_e980_\(9080-m9s\):-:*:*:*:*:*:*:*
cpe:2.3:h:ibm:power_system_h922_\(9223-22h\):-:*:*:*:*:*:*:*
cpe:2.3:h:ibm:power_system_h922_\(9223-22s\):-:*:*:*:*:*:*:*
cpe:2.3:h:ibm:power_system_h924_\(\(9223-42s\):-:*:*:*:*:*:*:*
cpe:2.3:h:ibm:power_system_h924_\(9223-42h\):-:*:*:*:*:*:*:*
cpe:2.3:h:ibm:power_system_l922_\(9008-22l\):-:*:*:*:*:*:*:*
cpe:2.3:h:ibm:power_system_s914_\(9009-41a\):-:*:*:*:*:*:*:*
cpe:2.3:h:ibm:power_system_s914_\(9009-41g\):-:*:*:*:*:*:*:*
cpe:2.3:h:ibm:power_system_s922_\(9009-22a\):-:*:*:*:*:*:*:*
cpe:2.3:h:ibm:power_system_s922_\(9009-22g\):-:*:*:*:*:*:*:*
cpe:2.3:h:ibm:power_system_s924_\(9009-42a\):-:*:*:*:*:*:*:*
cpe:2.3:h:ibm:power_system_s924_\(9009-42g\):-:*:*:*:*:*:*:*

Configuration 2 [-]

AND
OR cpe:2.3:o:ibm:powervm_hypervisor:*:*:*:*:*:*:*:*
cpe:2.3:o:ibm:powervm_hypervisor:*:*:*:*:*:*:*:*
cpe:2.3:h:ibm:power_system_e1080_\(9080-hex\):-:*:*:*:*:*:*:*

Configuration 3 [-]

AND
OR cpe:2.3:o:ibm:powervm_hypervisor:*:*:*:*:*:*:*:*
cpe:2.3:o:ibm:powervm_hypervisor:*:*:*:*:*:*:*:*
OR cpe:2.3:h:ibm:power_system_e1050_\(9043-mrx\):-:*:*:*:*:*:*:*
cpe:2.3:h:ibm:power_system_l1022_\(9786-22h\):-:*:*:*:*:*:*:*
cpe:2.3:h:ibm:power_system_l1024_\(9786-42h\):-:*:*:*:*:*:*:*
cpe:2.3:h:ibm:power_system_s1012_\(9028-21b\):-:*:*:*:*:*:*:*
cpe:2.3:h:ibm:power_system_s1014_\(9105-41b\):-:*:*:*:*:*:*:*
cpe:2.3:h:ibm:power_system_s1022_\(9105-22a\):-:*:*:*:*:*:*:*
cpe:2.3:h:ibm:power_system_s1022s_\(9105-22b\):-:*:*:*:*:*:*:*
cpe:2.3:h:ibm:power_system_s1024_\(9105-42a\):-:*:*:*:*:*:*:*

No data.

No data.

Advisories
Source ID Title
EUVD EUVD EUVD-2025-29121 IBM PowerVM Hypervisor FW950.00 through FW950.E0, FW1050.00 through FW1050.50, and FW1060.00 through FW1060.40 could allow a local privileged user to cause a denial of service by issuing a specially crafted IBM i hypervisor call that would disclose memory contents or consume excessive memory resources.
Fixes

Solution

Customers with the products below should install 950.E1(950_182)/950.F0(950_192) or newer to remediate this vulnerability. Power 9 * IBM Power System L922 (9008-22L) * IBM Power System S922 (9009-22A, 9009-22G) * IBM Power System H922 (9223-22H, 9223-22S) * IBM Power System S914 (9009-41A, 9009-41G) * IBM Power System S924 (9009-42A, 9009-42G) * IBM Power System H924 (9223-42H, 9223-42S) * IBM Power System E950 (9040-MR9) * IBM Power System E980 (9080-M9S) Customers with the products below should install FW1050.51(1050_095)/FW1050.60(1050_090), FW1060.41(1060_120), or newer to remediate this vulnerability. Power 10 * IBM Power System E1080 (9080-HEX)   Customers with the products below should install FW1050.51(1050_113)/FW1050.60(1050_108), FW1060.41(1060_120), or newer to remediate this vulnerability. Power 10 * IBM Power System S1022 (9105-22A) * IBM Power System S1024 (9105-42A) * IBM Power System S1022s (9105-22B) * IBM Power System S1014 (9105-41B) * IBM Power System L1022 (9786-22H) * IBM Power System L1024 (9786-42H) * IBM Power System E1050 (9043-MRX) * IBM Power System S1012 (9028-21B)

Workaround

No workaround given by the vendor.

References
Link Providers
https://www.ibm.com/support/pages/node/7244813 cve-icon cve-icon
History

Fri, 19 Dec 2025 13:30:00 +0000

Type Values Removed Values Added
First Time appeared Ibm power System E1050 \(9043-mrx\)
Ibm power System E1080 \(9080-hex\)
Ibm power System E950 \(9040-mr9\)
Ibm power System E980 \(9080-m9s\)
Ibm power System H922 \(9223-22h\)
Ibm power System H922 \(9223-22s\)
Ibm power System H924 \(9223-42h\)
Ibm power System H924 \(\(9223-42s\)
Ibm power System L1022 \(9786-22h\)
Ibm power System L1024 \(9786-42h\)
Ibm power System L922 \(9008-22l\)
Ibm power System S1012 \(9028-21b\)
Ibm power System S1014 \(9105-41b\)
Ibm power System S1022 \(9105-22a\)
Ibm power System S1022s \(9105-22b\)
Ibm power System S1024 \(9105-42a\)
Ibm power System S914 \(9009-41a\)
Ibm power System S914 \(9009-41g\)
Ibm power System S922 \(9009-22a\)
Ibm power System S922 \(9009-22g\)
Ibm power System S924 \(9009-42a\)
Ibm power System S924 \(9009-42g\)
Ibm powervm Hypervisor
CPEs cpe:2.3:h:ibm:power_system_e1050_\(9043-mrx\):-:*:*:*:*:*:*:*
cpe:2.3:h:ibm:power_system_e1080_\(9080-hex\):-:*:*:*:*:*:*:*
cpe:2.3:h:ibm:power_system_e950_\(9040-mr9\):-:*:*:*:*:*:*:*
cpe:2.3:h:ibm:power_system_e980_\(9080-m9s\):-:*:*:*:*:*:*:*
cpe:2.3:h:ibm:power_system_h922_\(9223-22h\):-:*:*:*:*:*:*:*
cpe:2.3:h:ibm:power_system_h922_\(9223-22s\):-:*:*:*:*:*:*:*
cpe:2.3:h:ibm:power_system_h924_\(9223-42h\):-:*:*:*:*:*:*:*
cpe:2.3:h:ibm:power_system_h924_\(\(9223-42s\):-:*:*:*:*:*:*:*
cpe:2.3:h:ibm:power_system_l1022_\(9786-22h\):-:*:*:*:*:*:*:*
cpe:2.3:h:ibm:power_system_l1024_\(9786-42h\):-:*:*:*:*:*:*:*
cpe:2.3:h:ibm:power_system_l922_\(9008-22l\):-:*:*:*:*:*:*:*
cpe:2.3:h:ibm:power_system_s1012_\(9028-21b\):-:*:*:*:*:*:*:*
cpe:2.3:h:ibm:power_system_s1014_\(9105-41b\):-:*:*:*:*:*:*:*
cpe:2.3:h:ibm:power_system_s1022_\(9105-22a\):-:*:*:*:*:*:*:*
cpe:2.3:h:ibm:power_system_s1022s_\(9105-22b\):-:*:*:*:*:*:*:*
cpe:2.3:h:ibm:power_system_s1024_\(9105-42a\):-:*:*:*:*:*:*:*
cpe:2.3:h:ibm:power_system_s914_\(9009-41a\):-:*:*:*:*:*:*:*
cpe:2.3:h:ibm:power_system_s914_\(9009-41g\):-:*:*:*:*:*:*:*
cpe:2.3:h:ibm:power_system_s922_\(9009-22a\):-:*:*:*:*:*:*:*
cpe:2.3:h:ibm:power_system_s922_\(9009-22g\):-:*:*:*:*:*:*:*
cpe:2.3:h:ibm:power_system_s924_\(9009-42a\):-:*:*:*:*:*:*:*
cpe:2.3:h:ibm:power_system_s924_\(9009-42g\):-:*:*:*:*:*:*:*
cpe:2.3:o:ibm:powervm_hypervisor:*:*:*:*:*:*:*:*
Vendors & Products Ibm power System E1050 \(9043-mrx\)
Ibm power System E1080 \(9080-hex\)
Ibm power System E950 \(9040-mr9\)
Ibm power System E980 \(9080-m9s\)
Ibm power System H922 \(9223-22h\)
Ibm power System H922 \(9223-22s\)
Ibm power System H924 \(9223-42h\)
Ibm power System H924 \(\(9223-42s\)
Ibm power System L1022 \(9786-22h\)
Ibm power System L1024 \(9786-42h\)
Ibm power System L922 \(9008-22l\)
Ibm power System S1012 \(9028-21b\)
Ibm power System S1014 \(9105-41b\)
Ibm power System S1022 \(9105-22a\)
Ibm power System S1022s \(9105-22b\)
Ibm power System S1024 \(9105-42a\)
Ibm power System S914 \(9009-41a\)
Ibm power System S914 \(9009-41g\)
Ibm power System S922 \(9009-22a\)
Ibm power System S922 \(9009-22g\)
Ibm power System S924 \(9009-42a\)
Ibm power System S924 \(9009-42g\)
Ibm powervm Hypervisor

Mon, 15 Sep 2025 16:15:00 +0000

Type Values Removed Values Added
Metrics ssvc

{'options': {'Automatable': 'no', 'Exploitation': 'none', 'Technical Impact': 'partial'}, 'version': '2.0.3'}

Sun, 14 Sep 2025 13:00:00 +0000

Type Values Removed Values Added
Description IBM PowerVM Hypervisor FW950.00 through FW950.E0, FW1050.00 through FW1050.50, and FW1060.00 through FW1060.40 could allow a local privileged user to cause a denial of service by issuing a specially crafted IBM i hypervisor call that would disclose memory contents or consume excessive memory resources.
Title IBM PowerVM Hypervisor denial of service
First Time appeared Ibm
Ibm power9 System Firmware
Weaknesses CWE-770
CPEs cpe:2.3:o:ibm:power9_system_firmware:fw1050.00:*:*:*:*:*:*:*
cpe:2.3:o:ibm:power9_system_firmware:fw1050.50:*:*:*:*:*:*:*
cpe:2.3:o:ibm:power9_system_firmware:fw1060.00:*:*:*:*:*:*:*
cpe:2.3:o:ibm:power9_system_firmware:fw1060.40:*:*:*:*:*:*:*
cpe:2.3:o:ibm:power9_system_firmware:fw950.00:*:*:*:*:*:*:*
cpe:2.3:o:ibm:power9_system_firmware:fw950.E0:*:*:*:*:*:*:*
Vendors & Products Ibm
Ibm power9 System Firmware
References
Metrics cvssV3_1

{'score': 6.7, 'vector': 'CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:C/C:L/I:N/A:H'}

Projects

Sign in to view the affected projects.

cve-icon MITRE

Status: PUBLISHED

Assigner: ibm

Published:

Updated: 2025-09-15T15:59:00.889Z

Reserved: 2025-04-15T21:16:09.684Z

Link: CVE-2025-36035

cve-icon Vulnrichment

Updated: 2025-09-15T15:58:55.264Z

cve-icon NVD

Status : Analyzed

Published: 2025-09-14T13:15:32.450

Modified: 2025-12-19T13:29:49.780

Link: CVE-2025-36035

cve-icon Redhat

No data.

cve-icon OpenCVE Enrichment

No data.

Weaknesses