CVE-2025-36194

This Power System update is being released to address

LOW

3.3

CVSS Score

Published: February 2, 2026 at 10:01 PM UTC

Updated: June 17, 2026 at 09:14 AM UTC

1 product affected across 1 vendorPowerVM Hypervisor

Using PowerVM Hypervisor by IBM?

Get instant alerts when new vulnerabilities affect PowerVM Hypervisor - before attackers find them.

Real-time alertsTrack your software stackFree plan available

Start Free Sign In

Severity

LOW3.3

Exploit prediction

EPSS 0.1%

SSVC

No known exploit

Description

IBM PowerVM Hypervisor FW1110.00 through FW1110.03, FW1060.00 through FW1060.51, and FW950.00 through FW950.F0 may expose a limited amount of data to a peer partition in specific shared processor configurations during certain operations.

Affected

Our own answer: ranges merged, affected separated from platform-only, with confidence and review flags.

PowerVM Hypervisor · IBM

95%

FW1060.00 ≤ v ≤ FW1060.51FW1110.00 ≤ v ≤ FW1110.03FW950.00 ≤ v ≤ FW950.F0FW1060.00 FW1110.00 FW950.00 fw1060.00 fw1060.00.0 fw1060.10 fw1060.12 fw1060.20 fw1060.21 fw1060.40 fw1060.41 fw1060.50 fw1060.51 fw1060.51.0 fw1110.00 fw1110.00.0 fw1110.01 fw1110.03 fw1110.03.0 fw950.00 fw950.00.0 fw950.10 fw950.11 fw950.20 fw950.30 fw950.40 fw950.50 fw950.60 fw950.70 fw950.71 fw950.80 fw950.90 fw950.a0 fw950.b0 fw950.c0 fw950.c1 fw950.c2 fw950.d0 fw950.d1 fw950.e0 fw950.e1 fw950.f0 fw950.f0.0

Remediation

No guide yet

No remediation guidance has been written for this CVE yet. What the record does show:

Patch and advisory references

https://www.ibm.com/support/pages/node/7257555

References (1)

Vendor AdvisoryPatch

Source: cverecord

https://www.ibm.com/support/pages/node/7257555

SSVC — Action Prioritization

SSVCNo known exploitNot automatablePartial impact

SSVC signals action urgency (what to patch first), separate from CVSS which measures severity.

CVSS

3.3LOW[email protected]

Attack Vector: LOCAL
Complexity: LOW
Privileges: LOW
User Interaction: NONE
Scope: UNCHANGED
Confidentiality: LOW
Integrity: NONE
Availability: NONE

Vector?

Quick Info

StatusANALYZED

CWE

CWE-1262

Get alerted

Stop reading CVE feeds looking for your own stack

Track the products you run and VulnTracker tells you when a new CVE affects them — with what is known about fixing it, and nothing about the rest.

Create account Sign in

Free plan, no card