medium6.7
CVE-2026-19783
IBM AIX 7.2, and 7.3 and IBM PowerVM VIOS 4.1 could allow a local attacker to cause kernel memory corruption due to insufficient validation.
Impact
IBM AIX 7.2, and 7.3 and IBM PowerVM VIOS 4.1 could allow a local attacker to cause kernel memory corruption due to insufficient validation. A crafted filesystem image can trigger an out-of-bounds kernel-stack write during directory reads, causing a system crash or potentially enabling privilege escalation.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Ibm | Vios | from 4.1.0 before 4.1.0.50 from 4.1.1.0 before 4.1.1.30 from 4.1.2.0 before 4.1.2.20 |
| Ibm | Aix | from 7.2.5 through 7.2.5.212 from 7.3.2 through 7.3.2.5 from 7.3.3 through 7.3.3.2 from 7.3.4 through 7.3.4.1 |