CVE-2026-4932: power system s1122 (9824-22a) firmware from fw1110.00 (inclusive), before fw1110.30 (exclusive); +17 more affected…

Affected technology

power system s1122 (9824-22a) firmware · from fw1110.00 (inclusive), before fw1110.30 (exclusive)
ibm

power system s1124 (9824-42a) firmware · from fw1110.00 (inclusive), before fw1110.30 (exclusive)
ibm

power system s1122s (9824-22b) firmware · from fw1110.00 (inclusive), before fw1110.30 (exclusive)
ibm

power system s1114 (9824-41b) firmware · from fw1110.00 (inclusive), before fw1110.30 (exclusive)
ibm

power system l1122 (9856-22h) firmware · from fw1110.00 (inclusive), before fw1110.30 (exclusive)
ibm

power system l1124 (9856-42h) firmware · from fw1110.00 (inclusive), before fw1110.30 (exclusive)
ibm

power system e1150 (9043-mru) firmware · from fw1110.00 (inclusive), before fw1110.30 (exclusive)
ibm

power system s1022 (9105-22a) firmware · from fw1060.00 (inclusive), before fw1060.72 (exclusive)
ibm

power system s1024 (9105-42a) firmware · from fw1060.00 (inclusive), before fw1060.72 (exclusive)
ibm

power system s1022s (9105-22b) firmware · from fw1060.00 (inclusive), before fw1060.72 (exclusive)
ibm

power system s1014 (9105-41b) firmware · from fw1060.00 (inclusive), before fw1060.72 (exclusive)
ibm

power system l1022 (9786-22h) firmware · from fw1060.00 (inclusive), before fw1060.72 (exclusive)
ibm

power system l1024 (9786-42h) firmware · from fw1060.00 (inclusive), before fw1060.72 (exclusive)
ibm

power system e1050 (9043-mrx) firmware · from fw1060.00 (inclusive), before fw1060.72 (exclusive)
ibm

power system s1012 (9028-21b) firmware · from fw1060.00 (inclusive), before fw1060.72 (exclusive)
ibm

power system e1180 (9080-heu) firmware · from fw1110.00 (inclusive), before fw1110.30 (exclusive)
ibm

power system e1080 (9080-hex) firmware · from fw1060.00 (inclusive), before fw1060.72 (exclusive)
ibm

PowerVM Hypervisor · FW1110.00 through FW1110.20, FW1060.00 through FW1060.71
IBM

Description’s affected range: through FW1110.20, and FW1060.00 through FW1060.71 could

Component: Not specified by the source

Attack conditions (Vendor/CNA, CVSS 3.1): Physical access · No privileges required · No user interaction required

Attack conditions (NVD, CVSS 3.1): Physical access · No privileges required · No user interaction required

What an attacker can do

An attacker with physical access could the Transparent Memory Encryption (TME) hardware to decrypt encrypted memory due to insufficient cryptographic entropy. Vendor/CNA’s CVSS 3.1 assessment (base score 4.2/10) rates confidentiality impact as high; integrity and availability impact as none. NVD’s CVSS 3.1 assessment (base score 4.6/10) rates confidentiality impact as high; integrity and availability impact as none.