CVE-2026-11885

HIGH

IBM PowerVM Hypervisor - Power System Update in Buffer Copy

Title source: rule

Description

IBM PowerVM Hypervisor FW1110.00 through FW1110.20, FW1060.00 through FW1060.71, and FW950.00 through FW950.H1 A carefully crafted OS hypervisor call can cause the PowerVM hypervisor to crash or compromise OS memory integrity.

References (1)

Core 1

Core References

Vendor Advisory vendor-advisory patch

https://www.ibm.com/support/pages/node/7280628

Scores

CVSS v3 8.4

Attack Vector LOCAL

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:N/I:H/A:H

CISA SSVC

Vulnrichment

Exploitation none

Automatable no

Technical Impact partial

Details

CWE

CWE-120

Status published

Products (3)

IBM/PowerVM Hypervisor FW1060.00 - FW1060.71

IBM/PowerVM Hypervisor FW1110.00 - FW1110.20

IBM/PowerVM Hypervisor FW950.00 - FW950.H1

Published Jul 30, 2026

Tracked Since Jul 30, 2026