IBM PowerVM Hypervisor versions FW1120.00, FW1110.00 through FW1110.30, FW1060.00 through FW1060.80, and FW950.00 through FW950.H2 contain a vulnerability in the hypervisor call interface. An attacker with root privileges in a guest partition can exploit improper validation of array indices (CWE-129) to cause a virtual processor to become permanently unresponsive, necessitating a full platform re-initialization (re-IPL). Additionally, exploitation may result in limited data injection into hypervisor or partition memory without control over the injection location. The vulnerability leads to integrity and availability impacts on the managed system. The CVSS v3.1 base score is 7.3 (High), with attack vector local, low attack complexity, low privileges required, no user interaction, scope changed, no confidentiality impact, low integrity impact, and high availability impact. No patch or official remediation has been confirmed as of the published date.

Successful exploitation causes a virtual processor in the IBM PowerVM Hypervisor to become permanently unresponsive, requiring a full platform reboot to restore normal operation. This results in a high availability impact. Additionally, there may be a limited integrity impact due to unintended data injection into hypervisor or partition memory, though the attacker does not control the injection location. There is no confidentiality impact reported.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. No official fix or temporary workaround has been documented. Until a patch is available, restrict root access to guest partitions to trusted users only to reduce risk.