NetSight
critical9.4

CVE-2026-16839

IBM AIX 7.2, and 7.3 and IBM PowerVM VIOS 4.1 could allow a remote attacker to obtain sensitive information due to an integer underflow in the IPv4 IP-options …

Impact

IBM AIX 7.2, and 7.3 and IBM PowerVM VIOS 4.1 could allow a remote attacker to obtain sensitive information due to an integer underflow in the IPv4 IP-options parser.

Affected products

VendorProductAffected versions
IbmAix
from 7.2.5 through 7.2.5.212
from 7.3.2 through 7.3.2.5
from 7.3.3 through 7.3.3.2
from 7.3.4 through 7.3.4.1
IbmVios
from 4.1.0 before 4.1.0.50
from 4.1.1.0 before 4.1.1.30
from 4.1.2.0 before 4.1.2.20

Weakness classification

References