CVE-2026-19448
Full vulnerability record from the local CVENow database.
Description
IBM AIX 7.2, and 7.3 and IBM PowerVM VIOS 4.1 A stack memory corruption vulnerability exists in the AIX IPsec ESP decapsulation handler. Successful exploitation may corrupt kernel stack state and cause a system crash, resulting in denial of service.
Severity
HIGH
CVSS score
7.5
(v3.1)
Vulnerability status
Analyzed
Source identifier
Published
2026-08-20 22:17:18.440000
Last modified
2026-10-26 10:10:00.140000
View original CVE JSON
{
"id": "CVE-2026-19448",
"sourceIdentifier": "[email protected]",
"published": "2026-08-20T22:17:18.440",
"lastModified": "2026-10-26T10:10:00.140",
"vulnStatus": "Analyzed",
"cveTags": [],
"descriptions": [
{
"lang": "en",
"value": "IBM AIX 7.2, and 7.3 and IBM PowerVM VIOS 4.1 A stack memory corruption vulnerability exists in the AIX IPsec ESP decapsulation handler. Successful exploitation may corrupt kernel stack state and cause a system crash, resulting in denial of service."
},
{
"lang": "es",
"value": "IBM AIX 7.2, y 7.3 e IBM PowerVM VIOS 4.1. Existe una vulnerabilidad de corrupción de memoria en la pila en el gestor de desencapsulación ESP de IPsec de AIX. Una explotación exitosa puede corromper el estado de la pila del kernel y causar una caída del sistema, lo que resulta en una denegación de servicio."
}
],
"affected": [
{
"source": "[email protected]",
"affectedData": [
{
"vendor": "IBM",
"product": "AIX",
"cpes": [
"cpe:2.3:a:ibm:aix:7.2:*:*:*:*:*:*:*",
"cpe:2.3:a:ibm:aix:7.2.0:*:*:*:*:*:*:*",
"cpe:2.3:a:ibm:aix:7.3:*:*:*:*:*:*:*",
"cpe:2.3:a:ibm:aix:7.3.0:*:*:*:*:*:*:*"
],
"versions": [
{
"version": "7.2",
"status": "affected"
},
{
"version": "7.3",
"status": "affected"
}
]
},
{
"vendor": "IBM",
"product": "PowerVM VIOS",
"cpes": [
"cpe:2.3:a:ibm:powervm_vios:4.1:*:*:*:*:*:*:*",
"cpe:2.3:a:ibm:powervm_vios:4.1.0:*:*:*:*:*:*:*"
],
"versions": [
{
"version": "4.1",
"status": "affected"
}
]
}
]
}
],
"metrics": {
"cvssMetricV31": [
{
"source": "[email protected]",
"type": "Secondary",
"cvssData": {
"version": "3.1",
"vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:H",
"baseScore": 6.5,
"baseSeverity": "MEDIUM",
"attackVector": "NETWORK",
"attackComplexity": "HIGH",
"privilegesRequired": "NONE",
"userInteraction": "NONE",
"scope": "UNCHANGED",
"confidentialityImpact": "NONE",
"integrityImpact": "LOW",
"availabilityImpact": "HIGH"
},
"exploitabilityScore": 2.2,
"impactScore": 4.2
},
{
"source": "[email protected]",
"type": "Primary",
"cvssData": {
"version": "3.1",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
"baseScore": 7.5,
"baseSeverity": "HIGH",
"attackVector": "NETWORK",
"attackComplexity": "LOW",
"privilegesRequired": "NONE",
"userInteraction": "NONE",
"scope": "UNCHANGED",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"availabilityImpact": "HIGH"
},
"exploitabilityScore": 3.9,
"impactScore": 3.6
}
],
"ssvcV203": [
{
"source": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
"ssvcData": {
"timestamp": "2026-08-21T13:52:25.870033Z",
"id": "CVE-2026-19448",
"options": [
{
"exploitation": "none"
},
{
"automatable": "no"
},
{
"technicalImpact": "partial"
}
],
"role": "CISA Coordinator",
"version": "2.0.3"
}
}
]
},
"weaknesses": [
{
"source": "[email protected]",
"type": "Secondary",
"description": [
{
"lang": "en",
"value": "CWE-908"
}
]
}
],
"configurations": [
{
"nodes": [
{
"operator": "OR",
"negate": false,
"cpeMatch": [
{
"vulnerable": true,
"criteria": "cpe:2.3:a:ibm:vios:*:*:*:*:*:*:*:*",
"versionStartIncluding": "4.1.0",
"versionEndExcluding": "4.1.0.50",
"matchCriteriaId": "4A14B743-DDD2-467F-90E7-3431CE35F835"
},
{
"vulnerable": true,
"criteria": "cpe:2.3:a:ibm:vios:*:*:*:*:*:*:*:*",
"versionStartIncluding": "4.1.1.0",
"versionEndExcluding": "4.1.1.30",
"matchCriteriaId": "37B446F0-EE99-42EA-99EE-80E517FDCB78"
},
{
"vulnerable": true,
"criteria": "cpe:2.3:a:ibm:vios:*:*:*:*:*:*:*:*",
"versionStartIncluding": "4.1.2.0",
"versionEndExcluding": "4.1.2.20",
"matchCriteriaId": "6245F535-1896-4CC5-8EC9-89C8EF455B8C"
}
]
}
]
},
{
"nodes": [
{
"operator": "OR",
"negate": false,
"cpeMatch": [
{
"vulnerable": true,
"criteria": "cpe:2.3:o:ibm:aix:*:*:*:*:*:*:*:*",
"versionStartIncluding": "7.2.5",
"versionEndIncluding": "7.2.5.212",
"matchCriteriaId": "EB84A37D-4C98-44FC-8B9B-E14DA7C88ED5"
},
{
"vulnerable": true,
"criteria": "cpe:2.3:o:ibm:aix:*:*:*:*:*:*:*:*",
"versionStartIncluding": "7.3.2",
"versionEndIncluding": "7.3.2.5",
"matchCriteriaId": "EA55F75D-C50C-46D2-93CC-EABB8F49B03F"
},
{
"vulnerable": true,
"criteria": "cpe:2.3:o:ibm:aix:*:*:*:*:*:*:*:*",
"versionStartIncluding": "7.3.3",
"versionEndIncluding": "7.3.3.2",
"matchCriteriaId": "B4115FCC-1026-417E-8D30-237B2C90367E"
},
{
"vulnerable": true,
"criteria": "cpe:2.3:o:ibm:aix:*:*:*:*:*:*:*:*",
"versionStartIncluding": "7.3.4",
"versionEndIncluding": "7.3.4.1",
"matchCriteriaId": "340ADD53-8363-4CDA-AEEB-8DC7CB0088D5"
}
]
}
]
}
],
"references": [
{
"url": "https://www.ibm.com/support/pages/node/7283858",
"source": "[email protected]",
"tags": [
"Patch",
"Vendor Advisory"
]
}
]
}