CVE-2026-19783
Full vulnerability record from the local CVENow database.
Description
IBM AIX 7.2, and 7.3 and IBM PowerVM VIOS 4.1 could allow a local attacker to cause kernel memory corruption due to insufficient validation. A crafted filesystem image can trigger an out-of-bounds kernel-stack write during directory reads, causing a system crash or potentially enabling privilege escalation.
Severity
HIGH
CVSS score
7.8
(v3.1)
Vulnerability status
Analyzed
Source identifier
Published
2026-08-20 22:17:18.773000
Last modified
2026-10-26 10:10:00.140000
View original CVE JSON
{
"id": "CVE-2026-19783",
"sourceIdentifier": "[email protected]",
"published": "2026-08-20T22:17:18.773",
"lastModified": "2026-10-26T10:10:00.140",
"vulnStatus": "Analyzed",
"cveTags": [],
"descriptions": [
{
"lang": "en",
"value": "IBM AIX 7.2, and 7.3 and IBM PowerVM VIOS 4.1 could allow a local attacker to cause kernel memory corruption due to insufficient validation. A crafted filesystem image can trigger an out-of-bounds kernel-stack write during directory reads, causing a system crash or potentially enabling privilege escalation."
},
{
"lang": "es",
"value": "IBM AIX 7.2 y 7.3 e IBM PowerVM VIOS 4.1 podría permitir a un atacante local causar corrupción de memoria del kernel debido a una validación insuficiente. Una imagen de sistema de archivos manipulada puede desencadenar una escritura fuera de límites en la pila del kernel durante lecturas de directorio, causando una caída del sistema o potencialmente permitiendo la escalada de privilegios."
}
],
"affected": [
{
"source": "[email protected]",
"affectedData": [
{
"vendor": "IBM",
"product": "AIX",
"cpes": [
"cpe:2.3:a:ibm:aix:7.2:*:*:*:*:*:*:*",
"cpe:2.3:a:ibm:aix:7.2.0:*:*:*:*:*:*:*",
"cpe:2.3:a:ibm:aix:7.3:*:*:*:*:*:*:*",
"cpe:2.3:a:ibm:aix:7.3.0:*:*:*:*:*:*:*"
],
"versions": [
{
"version": "7.2",
"status": "affected"
},
{
"version": "7.3",
"status": "affected"
}
]
},
{
"vendor": "IBM",
"product": "PowerVM VIOS",
"cpes": [
"cpe:2.3:a:ibm:powervm_vios:4.1:*:*:*:*:*:*:*",
"cpe:2.3:a:ibm:powervm_vios:4.1.0:*:*:*:*:*:*:*"
],
"versions": [
{
"version": "4.1",
"status": "affected"
}
]
}
]
}
],
"metrics": {
"cvssMetricV31": [
{
"source": "[email protected]",
"type": "Secondary",
"cvssData": {
"version": "3.1",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H",
"baseScore": 6.7,
"baseSeverity": "MEDIUM",
"attackVector": "LOCAL",
"attackComplexity": "LOW",
"privilegesRequired": "HIGH",
"userInteraction": "NONE",
"scope": "UNCHANGED",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"availabilityImpact": "HIGH"
},
"exploitabilityScore": 0.8,
"impactScore": 5.9
},
{
"source": "[email protected]",
"type": "Primary",
"cvssData": {
"version": "3.1",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
"baseScore": 7.8,
"baseSeverity": "HIGH",
"attackVector": "LOCAL",
"attackComplexity": "LOW",
"privilegesRequired": "LOW",
"userInteraction": "NONE",
"scope": "UNCHANGED",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"availabilityImpact": "HIGH"
},
"exploitabilityScore": 1.8,
"impactScore": 5.9
}
],
"ssvcV203": [
{
"source": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
"ssvcData": {
"timestamp": "2026-08-22T03:55:47.497825Z",
"id": "CVE-2026-19783",
"options": [
{
"exploitation": "none"
},
{
"automatable": "no"
},
{
"technicalImpact": "total"
}
],
"role": "CISA Coordinator",
"version": "2.0.3"
}
}
]
},
"weaknesses": [
{
"source": "[email protected]",
"type": "Secondary",
"description": [
{
"lang": "en",
"value": "CWE-787"
}
]
}
],
"configurations": [
{
"nodes": [
{
"operator": "OR",
"negate": false,
"cpeMatch": [
{
"vulnerable": true,
"criteria": "cpe:2.3:a:ibm:vios:*:*:*:*:*:*:*:*",
"versionStartIncluding": "4.1.0",
"versionEndExcluding": "4.1.0.50",
"matchCriteriaId": "4A14B743-DDD2-467F-90E7-3431CE35F835"
},
{
"vulnerable": true,
"criteria": "cpe:2.3:a:ibm:vios:*:*:*:*:*:*:*:*",
"versionStartIncluding": "4.1.1.0",
"versionEndExcluding": "4.1.1.30",
"matchCriteriaId": "37B446F0-EE99-42EA-99EE-80E517FDCB78"
},
{
"vulnerable": true,
"criteria": "cpe:2.3:a:ibm:vios:*:*:*:*:*:*:*:*",
"versionStartIncluding": "4.1.2.0",
"versionEndExcluding": "4.1.2.20",
"matchCriteriaId": "6245F535-1896-4CC5-8EC9-89C8EF455B8C"
}
]
}
]
},
{
"nodes": [
{
"operator": "OR",
"negate": false,
"cpeMatch": [
{
"vulnerable": true,
"criteria": "cpe:2.3:o:ibm:aix:*:*:*:*:*:*:*:*",
"versionStartIncluding": "7.2.5",
"versionEndIncluding": "7.2.5.212",
"matchCriteriaId": "EB84A37D-4C98-44FC-8B9B-E14DA7C88ED5"
},
{
"vulnerable": true,
"criteria": "cpe:2.3:o:ibm:aix:*:*:*:*:*:*:*:*",
"versionStartIncluding": "7.3.2",
"versionEndIncluding": "7.3.2.5",
"matchCriteriaId": "EA55F75D-C50C-46D2-93CC-EABB8F49B03F"
},
{
"vulnerable": true,
"criteria": "cpe:2.3:o:ibm:aix:*:*:*:*:*:*:*:*",
"versionStartIncluding": "7.3.3",
"versionEndIncluding": "7.3.3.2",
"matchCriteriaId": "B4115FCC-1026-417E-8D30-237B2C90367E"
},
{
"vulnerable": true,
"criteria": "cpe:2.3:o:ibm:aix:*:*:*:*:*:*:*:*",
"versionStartIncluding": "7.3.4",
"versionEndIncluding": "7.3.4.1",
"matchCriteriaId": "340ADD53-8363-4CDA-AEEB-8DC7CB0088D5"
}
]
}
]
}
],
"references": [
{
"url": "https://www.ibm.com/support/pages/node/7283858",
"source": "[email protected]",
"tags": [
"Patch",
"Vendor Advisory"
]
}
]
}