Executive brief
IBM AIX 7.2, 7.3 and PowerVM VIOS 4.1 contain a buffer overflow vulnerability that allows local attackers to execute arbitrary code with elevated privileges. This could enable an attacker with local access to compromise system integrity, gain full control of the operating system, and potentially access sensitive data or disrupt critical operations.
Technical details
A buffer overflow vulnerability exists in IBM AIX 7.2, 7.3 and PowerVM VIOS 4.1 that allows local attackers to execute arbitrary code. The vulnerability requires local access and user-level privileges to trigger. By exploiting this buffer overflow, an attacker can achieve code execution with the privileges of the vulnerable process, potentially leading to full system compromise. IBM has released security updates through Service Packs (SPs) and Fix Packs (FPs) to remediate this issue; customers should apply these fixes promptly.
Affected products
- IBM AIX 7.2, 7.3
- IBM PowerVM VIOS 4.1
Timeline
- 2026-08-20: disclosed