VDB
CVE-2026-19442
CVE-2026-19442
PUBLISHED
CVSS 8.2 HIGH
Reported by ibm · Published August 20, 2026
IBM AIX 7.2, and 7.3 and IBM PowerVM VIOS 4.1 has a pointer validation flaw exists in the AIX Virtual SCSI (vSCSI) initiator driver. Successful exploitation may result in denial of service, privilege escalation, or full compromise of the client LPAR kernel.
Risk Scores
CVSS 3.1
8.2
CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:C/C:H/I:H/A:H
Affected Products
| Vendor | Product | Versions |
|---|---|---|
| IBM | AIX | 7.2, 7.3 |
| IBM | PowerVM VIOS | 4.1 |
| IBM | PowerVM VIOS | 4.1, 4.1, 4.1 |
| IBM | AIX | 7.2, 7.3, 7.2 |
Timeline
- Aug 15, 2026 CVE Published
- Aug 24, 2026 EPSS Score
- Aug 26, 2026 EPSS Score