PT-2025-13521 · Ibm · Ibm Powervm Hypervisor

Published 2025-03-28 · Updated 2025-08-18 · CVE-2025-0986

Positive Technologies (AI Summary)

CVSS v3.1

4.5

Medium

Base vector

AV:L/AC:H/PR:N/UI:N/S:C/C:N/I:L/A:L

Name of the Vulnerable Software and Affected Versions IBM PowerVM Hypervisor versions FW1050.00 through FW1050.30 IBM PowerVM Hypervisor versions FW1060.00 through FW1060.20

Description The issue allows a local user, under certain Linux processor compatibility mode configurations, to cause undetected data loss or errors when performing gzip compression using HW acceleration.

Recommendations For IBM PowerVM Hypervisor versions FW1050.00 through FW1050.30, consider disabling HW acceleration for gzip compression until a patch is available. For IBM PowerVM Hypervisor versions FW1060.00 through FW1060.20, consider disabling HW acceleration for gzip compression until a patch is available. As a temporary workaround, restrict the use of gzip compression in Linux processor compatibility mode to minimize the risk of exploitation.

Fix

Weakness Enumeration

CWE-409

Related Identifiers

CVE-2025-0986

Affected Products

Ibm Powervm Hypervisor

References · 5

• https://osv.dev/vulnerability/CVE-2025-0986 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2025-0986 · Security Note
• https://ibm.com/support/pages/node/7229349 · Vendor Advisory, Patch
• https://twitter.com/CVEnew/status/1905674338873086375 · Twitter Post
• https://t.me/cveNotify/132720 · Telegram Post