Yüksek CVSS 7.8
CVE-2026-19783: Vios: sınır dışı yazma
Açıklama (NVD)
IBM AIX 7.2, and 7.3 and IBM PowerVM VIOS 4.1 could allow a local attacker to cause kernel memory corruption due to insufficient validation. A crafted filesystem image can trigger an out-of-bounds kernel-stack write during directory reads, causing a system crash or potentially enabling privilege escalation.
Özet bilgiler
- Ürün
- Ibm Vios
- CVSS v3.1
- 7.8
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H - EPSS
- %0,16 (yüzdelik 5)
- CWE
- CWE-787
- Yama
- Mevcut
Etkilenen sürümler
| Ürün | Başlangıç | Bitiş | Düzeltildi |
|---|---|---|---|
| ibm-vios | 4.1.0 | — | 4.1.0.50 |
| ibm-vios | 4.1.1.0 | — | 4.1.1.30 |
| ibm-vios | 4.1.2.0 | — | 4.1.2.20 |
| ibm-aix | 7.2.5 | 7.2.5.212 | — |
| ibm-aix | 7.3.2 | 7.3.2.5 | — |
| ibm-aix | 7.3.3 | 7.3.3.2 | — |
| ibm-aix | 7.3.4 | 7.3.4.1 | — |