What is CVE-2026-19442?

CVE-2026-19442 is a high-severity vulnerability in IBM Aix, classified under Untrusted Pointer Dereference. CVSS score: 8.2/10. Published 2026-08-20.

How severe is CVE-2026-19442?

High severity. CVSS v3 base score is 8.2 out of 10.

Vulnerability in IBM Aix

CVE-2026-19442

IBM AIX 7.2, and 7.3 and IBM PowerVM VIOS 4.1 has a pointer validation flaw exists in the AIX Virtual SCSI (vSCSI) initiator driver. Successful exploitation may result in denial of service, privilege escalation, or full compromise of the client LPAR kernel.

CVSS v3 metric

CVSS v3 base score 8.2 (High). Vector: CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:C/C:H/I:H/A:H.

Affected products

Ibm Aix — versions 7.2, 7.3
Ibm Powervm Vios — versions 4.1

Weakness classification (CWE)

CWE-822 — Untrusted Pointer Dereference

References

psirt@us.ibm.com (vendor-advisory, patch)

Frequently asked questions

What is CVE-2026-19442?: CVE-2026-19442 is a high-severity vulnerability in IBM Aix, classified under Untrusted Pointer Dereference. CVSS score: 8.2/10. Published 2026-08-20.
How severe is CVE-2026-19442?: High severity. CVSS v3 base score is 8.2 out of 10.