Skip to content
OpenAdvisories
Medium · 6.0 CVE-2025-36238 EUVD-2025-206790

Power System Exposure of Sensitive System Information

Published Feb 2, 2026 · Updated Feb 4, 2026 · Assigned by ibm

Description

IBM PowerVM Hypervisor FW1110.00 through FW1110.03, FW1060.00 through FW1060.51, and FW950.00 through FW950.F0 could allow a local user with administration privileges to obtain sensitive information from a Virtual TPM through a series of PowerVM service procedures.

Affected products

VendorProductAffectedFixed
IBM PowerVM Hypervisor FW1110.00 – ≤ FW1110.03, FW1060.00 – ≤ FW1060.51, FW950.00 – ≤ FW950.F0 —

References