PatchTheCVECVE-2026-11885: IBM PowerVM Hypervisor FW1110.00 through FW1110.20, FW1060.00 through FW1060.71, and FW950.00 through FW950.H1
30
Routine
HIGH 8.4UPGRADEUPGRADEUPGRADE
CVE-2026-11885 is a high-severity flaw (CVSS 8.4) affecting power system s1122 \(9824-22a\) firmware, power system s1124 \(9824-42a\) firmware, power system s1122s \(9824-22b\) firmware. Below: why it ranks where it does, which versions are affected, what to do, and the exact commands.
IBM PowerVM Hypervisor FW1110.00 through FW1110.20, FW1060.00 through FW1060.71, and FW950.00 through FW950.H1 A carefully crafted OS hypervisor call can cause the PowerVM hypervisor to crash or compromise OS memory integrity.
Why this priority
- High severity
A fixed release or distro patch exists.
Risk facts
| CVSS score | 8.4 (High) |
| Attack vector | Local |
| Attack complexity | Low |
| Privileges needed | Low |
| User interaction | None |
| EPSS exploit chance | 0.1% (top 96%) |
| CISA exploited list | No |
| Weakness | CWE-120 |
| Published | 2026-07-30 |
| Last modified | 2026-10-23 |
Publisher (CNA): IBM Corporation · Vendor: ibm
Am I affected?
Timeline
- Published CVE record published
- Updated Record last modified
ibm power system s1122 \(9824-22a\) firmware UPGRADE
Affected: >= fw1110.00 and < fw1110.30
Fixed in: fw1110.30
Safe to downgrade to: a release before fw1110.00
Check your OS release
cat /etc/os-release; uname -r
Debian / Ubuntu
sudo apt update && sudo apt full-upgrade
RHEL / Amazon Linux / Fedora
sudo dnf upgrade --refresh
Windows
Install the latest cumulative update from Windows Update
If no patch exists yet
OS downgrades are not safe. Apply the vendor mitigation from the advisory and restrict exposure.
ibm power system s1124 \(9824-42a\) firmware UPGRADE
Affected: >= fw1110.00 and < fw1110.30
Fixed in: fw1110.30
Safe to downgrade to: a release before fw1110.00
Check your OS release
cat /etc/os-release; uname -r
Debian / Ubuntu
sudo apt update && sudo apt full-upgrade
RHEL / Amazon Linux / Fedora
sudo dnf upgrade --refresh
Windows
Install the latest cumulative update from Windows Update
If no patch exists yet
OS downgrades are not safe. Apply the vendor mitigation from the advisory and restrict exposure.
ibm power system s1122s \(9824-22b\) firmware UPGRADE
Affected: >= fw1110.00 and < fw1110.30
Fixed in: fw1110.30
Safe to downgrade to: a release before fw1110.00
Check your OS release
cat /etc/os-release; uname -r
Debian / Ubuntu
sudo apt update && sudo apt full-upgrade
RHEL / Amazon Linux / Fedora
sudo dnf upgrade --refresh
Windows
Install the latest cumulative update from Windows Update
If no patch exists yet
OS downgrades are not safe. Apply the vendor mitigation from the advisory and restrict exposure.
ibm power system s1114 \(9824-41b\) firmware UPGRADE
Affected: >= fw1110.00 and < fw1110.30
Fixed in: fw1110.30
Safe to downgrade to: a release before fw1110.00
Check your OS release
cat /etc/os-release; uname -r
Debian / Ubuntu
sudo apt update && sudo apt full-upgrade
RHEL / Amazon Linux / Fedora
sudo dnf upgrade --refresh
Windows
Install the latest cumulative update from Windows Update
If no patch exists yet
OS downgrades are not safe. Apply the vendor mitigation from the advisory and restrict exposure.
ibm power system l1122 \(9856-22h\) firmware UPGRADE
Affected: >= fw1110.00 and < fw1110.30
Fixed in: fw1110.30
Safe to downgrade to: a release before fw1110.00
Check your OS release
cat /etc/os-release; uname -r
Debian / Ubuntu
sudo apt update && sudo apt full-upgrade
RHEL / Amazon Linux / Fedora
sudo dnf upgrade --refresh
Windows
Install the latest cumulative update from Windows Update
If no patch exists yet
OS downgrades are not safe. Apply the vendor mitigation from the advisory and restrict exposure.
ibm power system l1124 \(9856-42h\) firmware UPGRADE
Affected: >= fw1110.00 and < fw1110.30
Fixed in: fw1110.30
Safe to downgrade to: a release before fw1110.00
Check your OS release
cat /etc/os-release; uname -r
Debian / Ubuntu
sudo apt update && sudo apt full-upgrade
RHEL / Amazon Linux / Fedora
sudo dnf upgrade --refresh
Windows
Install the latest cumulative update from Windows Update
If no patch exists yet
OS downgrades are not safe. Apply the vendor mitigation from the advisory and restrict exposure.
Verify at the official source NVD · CVE Program · Report a problem with this page
Scores and fixes here are computed automatically from those and other public sources. Confirm with the vendor advisory before changing production systems.
Scores and fixes here are computed automatically from those and other public sources. Confirm with the vendor advisory before changing production systems.
Related CVEs
- CVE-2026-4932 MEDIUM 4.2 UPGRADE UPGRADE IBM PowerVM Hypervisor FW1110.00 through FW1110.20, and FW1060.00 through FW1060.71 could allow an attacker wi