Database/Firmware, BMC & network fabric
IBM Power Systems firmware: missing input length validation lets an adjacent attacker cause a DoS
Impact
Improper validation of input length in the service processor firmware gives an unauthenticated attacker on the management segment a denial of service against the service processor. Separate advisory and separate mechanism from the other IBM firmware DoS issues published the same day, so it has its own fixed levels. The effect on an operator is loss of out-of-band management - console, power, telemetry - on the affected machines and the Power Hardware Management Console, with host workloads unaffected. Confidentiality and integrity are not implicated per the CVSS vector.
Who can reach it
Unauthenticated, adjacent-network (CVSS AV:A): reachable from the management VLAN that the service processors and the HMC are on. No login needed.
What to do
Apply the fixed firmware levels in IBM support document 7294278 for the affected FW1060 and OP940/OP910 streams, and update the Power Hardware Management Console. Service-processor firmware flashes per machine; IBM states whether a level is concurrent, which this record does not - verify before scheduling. Management-network isolation removes the attacker's reach without needing a maintenance window.
References
Related entries
- Linux kernel (drivers/net/ethernet/mellanox/mlx5/core/en_accel): All IPsec offload objects on a physical function shareCVE-2026-23441 · Linux kernel (drivers/net/ethernet/mellanox/mlx5/core/en_accel)Medium
- Linux kernel RDS over InfiniBand (FRMR registration before connection establishment): An RDS sendmsg carryingCVE-2026-31425 · Linux kernel RDS over InfiniBand (FRMR registration before connection establishment)Medium
- Dell SmartFabric Manager: low-privileged remote user can read information it should not seeCVE-2026-54471 · Dell SmartFabric ManagerMedium
- HPE iLO 6 (denial of service): An unauthenticated attacker on an adjacent network can knock out iLO 6 availabilityCVE-2026-63457 · HPE iLO 6 (denial of service)Medium
- Dell OpenManage Enterprise: XML external entity processing exposes information to a low-privileged userCVE-2026-70423 · Dell OpenManage Enterprise (XML external entity processing)Medium
- Dell OpenManage Enterprise: path traversal exposes information to a low-privileged remote userCVE-2026-70424 · Dell OpenManage Enterprise (path traversal in a restricted-directory check)Medium
This entry is curated: imported from vendor advisories with machine assistance, not yet individually verified. Confirm against your vendor's advisory before acting, and report anything wrong.