Vulnerability Details CVE-2026-17042
IBM Power Systems Firmware FW950.00 through FW950.H2, OP940.00 through OP940.a1 (Power9), and OP940.00 - OP940.81 (Power HMC) is affected by a vulnerability in host firmware NVRAM parsing. An attacker with root access to a guest partition on an OpenPOWER system can write a specially crafted NVRAM image, causing the host firmware boot stage to crash with possible memory corruption. This condition persists until operator intervention — clearing NVRAM via the service processor — to restore normal operation. This vulnerability only affects OpenPOWER systems; systems running PowerVM are not affected. Successful exploitation results in an integrity and availability impact to the managed system.
Exploit prediction scoring system (EPSS) score
EPSS Score 0.001
EPSS Ranking 1.2%
CVSS Severity
CVSS v3 Score 7.3
Products affected by CVE-2026-17042
-
cpe:2.3:h:ibm:power_hardware_management_console_(7063-cr2):-
-
cpe:2.3:h:ibm:power_system_ac922_(8335-gth):-
-
cpe:2.3:h:ibm:power_system_e950_(9040-mr9):-
-
cpe:2.3:h:ibm:power_system_e980_(9080-m9s):-
-
cpe:2.3:h:ibm:power_system_h922_(9223-22s):-
-
cpe:2.3:h:ibm:power_system_h924_(9223-42s):-
-
cpe:2.3:h:ibm:power_system_s922_(9009-22g):-
-
cpe:2.3:h:ibm:power_system_s924_(9009-42g):-
-
cpe:2.3:o:ibm:power_hardware_management_console_(7063-cr2)_firmware:op940
-
cpe:2.3:o:ibm:power_system_ac922_(8335-gth)_firmware:op940
-
cpe:2.3:o:ibm:power_system_e950_(9040-mr9)_firmware:fw950.00
-
cpe:2.3:o:ibm:power_system_e950_(9040-mr9)_firmware:fw950.c0
-
cpe:2.3:o:ibm:power_system_e980_(9080-m9s)_firmware:fw950.00
-
cpe:2.3:o:ibm:power_system_e980_(9080-m9s)_firmware:fw950.c0
-
cpe:2.3:o:ibm:power_system_h922_(9223-22s)_firmware:fw950.00
-
cpe:2.3:o:ibm:power_system_h922_(9223-22s)_firmware:fw950.c0
-
cpe:2.3:o:ibm:power_system_h922_(9223-22s)_firmware:fw950.h2
-
cpe:2.3:o:ibm:power_system_h924_(9223-42s)_firmware:fw950.00
-
cpe:2.3:o:ibm:power_system_h924_(9223-42s)_firmware:fw950.c0
-
cpe:2.3:o:ibm:power_system_h924_(9223-42s)_firmware:fw950.h2
-
cpe:2.3:o:ibm:power_system_s914_(9009-41g)_firmware:fw950.00
-
cpe:2.3:o:ibm:power_system_s914_(9009-41g)_firmware:fw950.c0
-
cpe:2.3:o:ibm:power_system_s914_(9009-41g)_firmware:fw950.h2
-
cpe:2.3:o:ibm:power_system_s922_(9009-22g)_firmware:fw950.00
-
cpe:2.3:o:ibm:power_system_s922_(9009-22g)_firmware:fw950.c0
-
cpe:2.3:o:ibm:power_system_s922_(9009-22g)_firmware:fw950.h2
-
cpe:2.3:o:ibm:power_system_s924_(9009-42g)_firmware:fw950.00
-
cpe:2.3:o:ibm:power_system_s924_(9009-42g)_firmware:fw950.c0
-
cpe:2.3:o:ibm:power_system_s924_(9009-42g)_firmware:fw950.h2