CVE-2026-17159: CWE-190 Integer Overflow or Wraparound in IBM AIX

This vulnerability, identified as CWE-190 (Integer Overflow or Wraparound), exists in IBM AIX 7.2, 7.3, and IBM PowerVM VIOS 4.1. A remote attacker can exploit the integer overflow to cause a denial of service, impacting system availability. The CVSS v3.1 base score is 7.5, reflecting high severity with network attack vector, low attack complexity, no privileges required, and no user interaction needed. There is no indication of confidentiality or integrity impact. No known exploits are reported in the wild, and no vendor patch or remediation information is provided in the input data.

Successful exploitation results in denial of service, causing system unavailability. There is no impact on confidentiality or integrity. The attack can be performed remotely without authentication or user interaction, increasing the risk of disruption to affected systems.

Patch status is not yet confirmed — check the IBM vendor advisory for current remediation guidance. Since no patch or workaround information is provided, administrators should monitor IBM security advisories for updates. Until a fix is available, consider limiting network exposure of affected systems to untrusted networks to reduce risk.