CVE-2026-19783

Received Received - Intake

Kernel Memory Corruption in IBM AIX and PowerVM VIOS

Publication date: 2026-08-20

Last updated on: 2026-08-20

Assigner: IBM Corporation

Description

IBM AIX 7.2, and 7.3 and IBM PowerVM VIOS 4.1 could allow a local attacker to cause kernel memory corruption due to insufficient validation. A crafted filesystem image can trigger an out-of-bounds kernel-stack write during directory reads, causing a system crash or potentially enabling privilege escalation.

CVSS Scores

EPSS Scores

Probability:
Percentile:

Meta Information

Published

2026-08-20

Last Modified

2026-08-20

Generated

2026-08-21

AI Q&A

2026-08-21

EPSS Evaluated

N/A

NVD

CVE-2026-19783

EUVD

EUVD-2026-63754

Affected Vendors & Products

Vendor	Product	Version / Range
ibm	aix	7.2
ibm	aix	7.3
ibm	powervm_vios	4.1

Helpful Resources

Exploitability

CWE

KEV

CWE ID	Description
CWE-787	The product writes data past the end, or before the beginning, of the intended buffer.

Attack-Flow Graph

Executive Summary

This vulnerability in IBM AIX 7.2, 7.3, and IBM PowerVM VIOS 4.1 allows a local attacker to corrupt kernel memory due to insufficient validation. A specially crafted filesystem image can cause an out-of-bounds write to the kernel stack during directory reads, leading to system crashes or potential privilege escalation.

Detection Guidance

This vulnerability involves kernel memory corruption triggered by crafted filesystem images during directory reads. Detection requires monitoring for system crashes or unusual kernel behavior after accessing untrusted filesystems. No specific commands are provided in the context to directly detect this issue.

Impact Analysis

This vulnerability could allow an attacker with local access to crash the system or gain elevated privileges, potentially leading to unauthorized access or control over the affected system.

Compliance Impact

This vulnerability could lead to kernel memory corruption and privilege escalation, which may compromise system integrity and data confidentiality. Such issues could violate compliance requirements under GDPR (data protection) and HIPAA (healthcare data security) by enabling unauthorized access or data breaches.

Mitigation Strategies

Apply IBM AIX and PowerVM VIOS security patches immediately upon availability. Avoid mounting untrusted filesystem images until patches are applied. Restrict local user access to reduce potential attack surface. Monitor IBM security advisories for updates.

Hi! I’m here to help you understand CVE-2026-19783. Ask me anything about the vulnerability, its impact, or mitigation strategies.

0/70