This vulnerability (CVE-2026-19442) affects IBM AIX versions 7.2 and 7.3, as well as IBM PowerVM VIOS 4.1. It is caused by a pointer validation flaw in the AIX Virtual SCSI (vSCSI) initiator driver. Successful exploitation may allow an attacker to cause denial of service, escalate privileges, or fully compromise the client Logical Partition (LPAR) kernel. The CVSS v3.1 base score is 8.2, indicating high severity, with attack vector local, low attack complexity, high privileges required, no user interaction, scope changed, and high impact on confidentiality, integrity, and availability. There is no vendor advisory or patch information provided, and no known exploits in the wild have been reported.

If exploited, this vulnerability can result in denial of service, privilege escalation, or complete compromise of the client LPAR kernel on affected IBM AIX and PowerVM VIOS systems. This could allow attackers with local access and high privileges to gain full control over the affected system's kernel.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. No official fix or temporary workaround is provided in the available data. Users should monitor IBM's security advisories for updates and apply patches once available.