CVE-2026-19442
Full vulnerability record from the local CVENow database.
Description
IBM AIX 7.2, and 7.3 and IBM PowerVM VIOS 4.1 has a pointer validation flaw exists in the AIX Virtual SCSI (vSCSI) initiator driver. Successful exploitation may result in denial of service, privilege escalation, or full compromise of the client LPAR kernel.
Severity
HIGH
CVSS score
8.8
(v3.1)
Vulnerability status
Analyzed
Source identifier
Published
2026-08-20 22:17:18.110000
Last modified
2026-10-26 10:10:00.140000
View original CVE JSON
{
"id": "CVE-2026-19442",
"sourceIdentifier": "[email protected]",
"published": "2026-08-20T22:17:18.110",
"lastModified": "2026-10-26T10:10:00.140",
"vulnStatus": "Analyzed",
"cveTags": [],
"descriptions": [
{
"lang": "en",
"value": "IBM AIX 7.2, and 7.3 and IBM PowerVM VIOS 4.1 has a pointer validation flaw exists in the AIX Virtual SCSI (vSCSI) initiator driver. Successful exploitation may result in denial of service, privilege escalation, or full compromise of the client LPAR kernel."
},
{
"lang": "es",
"value": "IBM AIX 7.2 y 7.3 e IBM PowerVM VIOS 4.1 presentan una vulnerabilidad de validación de punteros en el controlador iniciador SCSI Virtual (vSCSI) de AIX. La explotación exitosa puede resultar en denegación de servicio, escalada de privilegios o compromiso total del kernel LPAR del cliente."
}
],
"affected": [
{
"source": "[email protected]",
"affectedData": [
{
"vendor": "IBM",
"product": "AIX",
"cpes": [
"cpe:2.3:a:ibm:aix:7.2:*:*:*:*:*:*:*",
"cpe:2.3:a:ibm:aix:7.2.0:*:*:*:*:*:*:*",
"cpe:2.3:a:ibm:aix:7.3:*:*:*:*:*:*:*",
"cpe:2.3:a:ibm:aix:7.3.0:*:*:*:*:*:*:*"
],
"versions": [
{
"version": "7.2",
"status": "affected"
},
{
"version": "7.3",
"status": "affected"
}
]
},
{
"vendor": "IBM",
"product": "PowerVM VIOS",
"cpes": [
"cpe:2.3:a:ibm:powervm_vios:4.1:*:*:*:*:*:*:*",
"cpe:2.3:a:ibm:powervm_vios:4.1.0:*:*:*:*:*:*:*"
],
"versions": [
{
"version": "4.1",
"status": "affected"
}
]
}
]
}
],
"metrics": {
"cvssMetricV31": [
{
"source": "[email protected]",
"type": "Secondary",
"cvssData": {
"version": "3.1",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:C/C:H/I:H/A:H",
"baseScore": 8.2,
"baseSeverity": "HIGH",
"attackVector": "LOCAL",
"attackComplexity": "LOW",
"privilegesRequired": "HIGH",
"userInteraction": "NONE",
"scope": "CHANGED",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"availabilityImpact": "HIGH"
},
"exploitabilityScore": 1.5,
"impactScore": 6.0
},
{
"source": "[email protected]",
"type": "Primary",
"cvssData": {
"version": "3.1",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H",
"baseScore": 8.8,
"baseSeverity": "HIGH",
"attackVector": "LOCAL",
"attackComplexity": "LOW",
"privilegesRequired": "LOW",
"userInteraction": "NONE",
"scope": "CHANGED",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"availabilityImpact": "HIGH"
},
"exploitabilityScore": 2.0,
"impactScore": 6.0
}
],
"ssvcV203": [
{
"source": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
"ssvcData": {
"timestamp": "2026-08-21T00:00:00+00:00",
"id": "CVE-2026-19442",
"options": [
{
"exploitation": "none"
},
{
"automatable": "no"
},
{
"technicalImpact": "total"
}
],
"role": "CISA Coordinator",
"version": "2.0.3"
}
}
]
},
"weaknesses": [
{
"source": "[email protected]",
"type": "Secondary",
"description": [
{
"lang": "en",
"value": "CWE-822"
}
]
}
],
"configurations": [
{
"nodes": [
{
"operator": "OR",
"negate": false,
"cpeMatch": [
{
"vulnerable": true,
"criteria": "cpe:2.3:a:ibm:vios:*:*:*:*:*:*:*:*",
"versionStartIncluding": "4.1.0",
"versionEndExcluding": "4.1.0.50",
"matchCriteriaId": "4A14B743-DDD2-467F-90E7-3431CE35F835"
},
{
"vulnerable": true,
"criteria": "cpe:2.3:a:ibm:vios:*:*:*:*:*:*:*:*",
"versionStartIncluding": "4.1.1.0",
"versionEndExcluding": "4.1.1.30",
"matchCriteriaId": "37B446F0-EE99-42EA-99EE-80E517FDCB78"
},
{
"vulnerable": true,
"criteria": "cpe:2.3:a:ibm:vios:*:*:*:*:*:*:*:*",
"versionStartIncluding": "4.1.2.0",
"versionEndExcluding": "4.1.2.20",
"matchCriteriaId": "6245F535-1896-4CC5-8EC9-89C8EF455B8C"
}
]
}
]
},
{
"nodes": [
{
"operator": "OR",
"negate": false,
"cpeMatch": [
{
"vulnerable": true,
"criteria": "cpe:2.3:o:ibm:aix:*:*:*:*:*:*:*:*",
"versionStartIncluding": "7.2.5",
"versionEndIncluding": "7.2.5.212",
"matchCriteriaId": "EB84A37D-4C98-44FC-8B9B-E14DA7C88ED5"
},
{
"vulnerable": true,
"criteria": "cpe:2.3:o:ibm:aix:*:*:*:*:*:*:*:*",
"versionStartIncluding": "7.3.2",
"versionEndIncluding": "7.3.2.5",
"matchCriteriaId": "EA55F75D-C50C-46D2-93CC-EABB8F49B03F"
},
{
"vulnerable": true,
"criteria": "cpe:2.3:o:ibm:aix:*:*:*:*:*:*:*:*",
"versionStartIncluding": "7.3.3",
"versionEndIncluding": "7.3.3.2",
"matchCriteriaId": "B4115FCC-1026-417E-8D30-237B2C90367E"
},
{
"vulnerable": true,
"criteria": "cpe:2.3:o:ibm:aix:*:*:*:*:*:*:*:*",
"versionStartIncluding": "7.3.4",
"versionEndIncluding": "7.3.4.1",
"matchCriteriaId": "340ADD53-8363-4CDA-AEEB-8DC7CB0088D5"
}
]
}
]
}
],
"references": [
{
"url": "https://www.ibm.com/support/pages/node/7283858",
"source": "[email protected]",
"tags": [
"Patch",
"Vendor Advisory"
]
}
]
}