IBM PowerVM Hypervisor Data Loss Vulnerability During Gzip Compression with Hardware Acceleration

Vulnerability

A vulnerability in IBM PowerVM Hypervisor versions FW1050.00 through FW1050.30 and FW1060.00 through FW1060.20 could lead to undetected data loss or errors. This issue arises for local users under certain Linux processor compatibility mode configurations when using hardware acceleration for gzip compression.

Impact

Exploitation of this vulnerability could result in undetected data loss or errors during gzip compression, particularly when hardware acceleration is used.

Remediation

Users should upgrade to FW1050.31(1050_075)/FW1050.40(1050_079), FW1060.21(1060_078)/FW1060.30(1060_100) or newer. Specific Power10 systems have tailored upgrade instructions available.

Added: Jun 9, 2025, 7:46 PM
Updated: Jun 9, 2025, 7:46 PM

Vulnerability Rating

Custom Algorithm
spread
4.5
impact
2.5
exploitability
3.1
remediation
7.7
relevance
0.0
threat
0.0
urgency
2.9
incentive
1.7

Our algorithm analyzes dozens of metrics to generate these 8 key vulnerability categories, which are then combined to calculate the overall risk score.