This vulnerability is an integer underflow (wrap or wraparound) in IBM AIX 7.2, 7.3, and IBM PowerVM VIOS 4.1. The issue arises from an improper calculation of a memory offset during IPsec decapsulation, which can be triggered remotely by an attacker to cause a denial of service condition. The CVSS 3.1 base score is 7.5, reflecting a network attack vector with no privileges or user interaction required, and results in high impact on availability. No official fix or patch information is currently available.

A remote attacker can cause a denial of service on affected IBM AIX and PowerVM VIOS systems by exploiting an integer underflow in IPsec decapsulation. This results in system unavailability but does not affect confidentiality or integrity according to the CVSS vector.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until a patch is available, consider limiting exposure of affected systems to untrusted networks and monitoring for unusual IPsec traffic patterns that could trigger the vulnerability.