IBM PowerVM Hypervisor Data Exposure Vulnerability in Shared Processor Configurations

A vulnerability exists in the IBM PowerVM Hypervisor versions FW1110.00 through FW1110.03, FW1060.00 through FW1060.51, and FW950.00 through FW950.F0. In certain shared processor configurations, the hypervisor may inadvertently expose a limited amount of data to a peer partition during specific operations.

Impact

This vulnerability could lead to unauthorized data exposure between partitions in a shared processor environment.

Remediation

Users should upgrade to FW1110.10(1110_100) or newer for Power 11 systems, FW1060.52(1060_153)/FW1060.60(1060_158) or newer for Power 10 systems, and FW950.F1(950_194)/950.G0(950_203) or newer for Power 9 systems. Specific upgrade instructions can be found in the IBM Security Bulletin.