Skip to content
CVE PROGRAM SOURCE RECORD5.3 Medium

CVE-2026-4937

Power System Insufficient Entropy

Read JSON ↗CVE.org ↗
Status
Published
Published
Updated
Assigning organization
ibm

Description

IBM PowerVM Hypervisor FW1110.00 through FW1110.20, FW1060.00 through FW1060.71, and FW950.00 through FW950.H2 could allow a local attacker with administrative privileges to decrypt encrypted data due to certain hypervisor calls utilizing less entropy than requested.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

IBM PowerVM Hypervisor

  • FW1110.00 to ≤ FW1110.20affected
  • FW1060.00 to ≤ FW1060.71affected
  • FW950.00 to ≤ FW950.H2affected

References