IBM Power Systems firmware: uninitialized resource handling lets an adjacent attacker crash the service processor

CVSS 6.5CVE-2026-16682Firmware, BMC & network fabriccurated

Impact

An unauthenticated attacker on the same network segment as the service processor can trigger improper handling of uninitialized resources and cause a denial of service. The record scores availability-only impact: no confidentiality or integrity loss. What an operator loses is out-of-band management of the affected machines - remote console, power control, sensor telemetry and firmware update paths - while the host workload keeps running, which is exactly the capability needed to recover a node that later wedges. Affected levels span FW1120, FW1110, FW1060 and the OP940/OP910 OpenBMC streams, and the Hardware Management Console is listed as affected, so a single reachable attacker can take out management of a whole managed frame rather than one server.

Who can reach it

Unauthenticated, adjacent-network (CVSS AV:A): anyone with a presence on the management VLAN the service processors and HMC sit on. Not reachable from a tenant workload unless that workload can route to the management network.

What to do

Apply the fixed firmware levels listed in IBM support document 7294279 for each affected FW11xx/FW1060 and OP9xx stream, and update the Hardware Management Console. Service-processor firmware is flashed per machine; whether a given level installs concurrently or needs the system powered down is stated by IBM per level, not in this record - check it before scheduling. Independent of patching, the exposure is gated by network reach, so keeping service processors and the HMC on an isolated management VLAN with no tenant or general-corporate routing is the mitigation that does not need a window.

References

https://nvd.nist.gov/vuln/detail/CVE-2026-16682 https://www.ibm.com/support/pages/node/7294279

This entry is curated: imported from vendor advisories with machine assistance, not yet individually verified. Confirm against your vendor's advisory before acting, and report anything wrong.