CVE-2026-16817 is a vulnerability in IBM AIX 7.2 and 7.3, and IBM PowerVM VIOS 4.1, where a NULL pointer dereference can be triggered remotely, leading to a denial of service condition. The vulnerability is classified under CWE-476 (NULL Pointer Dereference). The CVSS 3.1 base score is 7.5, with attack vector network (AV:N), low attack complexity (AC:L), no privileges required (PR:N), no user interaction (UI:N), scope unchanged (S:U), no confidentiality or integrity impact (C:N/I:N), and high availability impact (A:H). There is no vendor advisory or patch information available at this time.

Successful exploitation of this vulnerability can cause a denial of service on affected IBM AIX systems and IBM PowerVM VIOS 4.1 by triggering a NULL pointer dereference. There is no impact on confidentiality or integrity, but availability is severely affected. No known exploits are reported in the wild.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until a patch or official fix is released by IBM, monitor vendor communications for updates. No specific mitigation or workaround is currently documented.