PT-2025-37413 · Ibm · Ibm Powervm Hypervisor

Published 2025-09-12 · Updated 2025-12-19 · CVE-2025-36035

Positive Technologies (AI Summary)

CVSS v3.1

6.7

Medium

Base vector

AV:L/AC:L/PR:H/UI:N/S:C/C:L/I:N/A:H

Name of the Vulnerable Software and Affected Versions IBM PowerVM Hypervisor versions FW950.00 through FW950.E0 IBM PowerVM Hypervisor versions FW1050.00 through FW1050.50 IBM PowerVM Hypervisor versions FW1060.00 through FW1060.40

Description The hypervisor may allow a local privileged user to cause a denial of service by issuing a specially crafted IBM i hypervisor call. This call could disclose memory contents or consume excessive memory resources.

Recommendations Update IBM PowerVM Hypervisor to a version later than FW950.E0. Update IBM PowerVM Hypervisor to a version later than FW1050.50. Update IBM PowerVM Hypervisor to a version later than FW1060.40.

Fix

DoS

Allocation of Resources Without Limits

Weakness Enumeration

CWE-770

Related Identifiers

BDU:2025-11362

CVE-2025-36035

Affected Products

Ibm Powervm Hypervisor

References · 9

• https://nvd.nist.gov/vuln/detail/CVE-2025-36035 · Security Note
• https://osv.dev/vulnerability/CVE-2025-36035 · Vendor Advisory
• https://bdu.fstec.ru/vul/2025-11362 · Security Note
• https://twitter.com/CVEnew/status/1967216220228165632 · Twitter Post
• https://t.me/cveNotify/146328 · Telegram Post
• https://ibm.com/support/pages/node/7244813 · Patch, Vendor Advisory
• https://twitter.com/guriguri_dW/status/1973596941285294246 · Twitter Post
• https://t.me/cveNotify/135404 · Telegram Post
• https://t.me/CVEtracker/32452 · Telegram Post