Threat Investigation
Request a demo

CVE-2026-17042

High

Description

IBM Power Systems Firmware FW950.00 through FW950.H2, OP940.00 through OP940.a1 (Power9), and OP940.00 - OP940.81 (Power HMC) is affected by a vulnerability in host firmware NVRAM parsing. An attacker with root access to a guest partition on an OpenPOWER system can write a specially crafted NVRAM image, causing the host firmware boot stage to crash with possible memory corruption. This condition persists until operator intervention — clearing NVRAM via the service processor — to restore normal operation. This vulnerability only affects OpenPOWER systems; systems running PowerVM are not affected. Successful exploitation results in an integrity and availability impact to the managed system.

SeverityHigh
CVSS7.3
Exploit probability—
ProductIbm Power System S922 \(9009-22g\) Firmware
PublishedAug 19, 2026
First seenAug 19, 2026
Weakness typeCWE-125Out-of-bounds read

How to fix

Update
  • ibm power_system_s922_\(9009-22g\)_firmwarefw950.h3 or later
  • ibm power_system_h922_\(9223-22s\)_firmwarefw950.h3 or later
  • ibm power_system_s914_\(9009-41g\)_firmwarefw950.h3 or later
  • ibm power_system_s924_\(9009-42g\)_firmwarefw950.h3 or later
  • ibm power_system_h924_\(9223-42s\)_firmwarefw950.h3 or later
  • ibm power_system_e950_\(9040-mr9\)_firmwarefw950.h3 or later
  • ibm power_system_e980_\(9080-m9s\)_firmwarefw950.h3 or later
  • ibm power_system_ac922_\(8335-gth\)_firmwareop940.a2 or later
  • ibm power_system_ac922_\(8335-gtx\)_firmwareop940.a2 or later
  • ibm power_hardware_management_console_\(7063-cr2\)_firmwareop940.82 or later
Patches

Affected products

ProductAffected versionsFixed in
ibm power_system_s922_\(9009-22g\)_firmwarefw950.00 ≤ v < fw950.h3fw950.h3
ibm power_system_h922_\(9223-22s\)_firmwarefw950.00 ≤ v < fw950.h3fw950.h3
ibm power_system_s914_\(9009-41g\)_firmwarefw950.00 ≤ v < fw950.h3fw950.h3
ibm power_system_s924_\(9009-42g\)_firmwarefw950.00 ≤ v < fw950.h3fw950.h3
ibm power_system_h924_\(9223-42s\)_firmwarefw950.00 ≤ v < fw950.h3fw950.h3
ibm power_system_e950_\(9040-mr9\)_firmwarefw950.00 ≤ v < fw950.h3fw950.h3
ibm power_system_e980_\(9080-m9s\)_firmwarefw950.00 ≤ v < fw950.h3fw950.h3
ibm power_system_ac922_\(8335-gth\)_firmwareop940 ≤ v < op940.a2op940.a2
ibm power_system_ac922_\(8335-gtx\)_firmwareop940 ≤ v < op940.a2op940.a2
ibm power_hardware_management_console_\(7063-cr2\)_firmwareop940 ≤ v < op940.82op940.82

Check your version

Choose the product and enter the version you run to see whether it falls in the affected range.

In the Intelligence 360 plan

Attack Surface Management

See the assets tied to your domains, the technologies they run and known vulnerabilities in one list.