CVE-2026-19442

EUVD-2026-63750
IBM AIX 7.2, and 7.3 and IBM PowerVM VIOS 4.1 has a pointer validation flaw exists in the AIX Virtual SCSI (vSCSI) initiator driver. Successful exploitation may result in denial of service, privilege escalation, or full compromise of the client LPAR kernel.
ProviderTypeBase ScoreAtk. VectorAtk. ComplexityPriv. RequiredVector
NISTPrimary
8.2 HIGH
LOCAL
LOW
HIGH
CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:C/C:H/I:H/A:H
Base Score
CVSS 3.x
EPSS Score
Percentile: 1.75%
Affected Products (NVD)
VendorProductVersion
ibmvios
4.1.0 ≤
𝑥
< 4.1.0.50
ibmvios
4.1.1.0 ≤
𝑥
< 4.1.1.30
ibmvios
4.1.2.0 ≤
𝑥
< 4.1.2.20
ibmaix
7.2.5 ≤
𝑥
≤ 7.2.5.212
ibmaix
7.3.2 ≤
𝑥
≤ 7.3.2.5
ibmaix
7.3.3 ≤
𝑥
≤ 7.3.3.2
ibmaix
7.3.4 ≤
𝑥
≤ 7.3.4.1
𝑥
= Vulnerable software versions