CVE-2025-0986 - Vulnerability Details - OpenCVE

IBM PowerVM Hypervisor FW1050.00 through FW1050.30 and FW1060.00 through FW1060.20 could allow a local user, under certain Linux processor combability mode configurations, to cause undetected data loss or errors when performing gzip compression using HW acceleration.

No CVSS v4.0

Attack Vector Local

Attack Complexity High

Privileges Required None

Scope Changed

Confidentiality Impact None

Integrity Impact Low

Availability Impact Low

User Interaction None

No CVSS v3.0

No CVSS v2

This CVE is not in the KEV list.

Exploitation none

Automatable no

Technical Impact partial

Vendors	Products
Ibm	Power9 System Firmware

No data.

No data.

References

Link	Providers
https://www.ibm.com/support/pages/node/7229349

History

Fri, 28 Mar 2025 14:15:00 +0000

Type	Values Removed	Values Added
Metrics		ssvc `{'options': {'Automatable': 'no', 'Exploitation': 'none', 'Technical Impact': 'partial'}, 'version': '2.0.3'}`

Fri, 28 Mar 2025 13:45:00 +0000

Type	Values Removed	Values Added
Description		IBM PowerVM Hypervisor FW1050.00 through FW1050.30 and FW1060.00 through FW1060.20 could allow a local user, under certain Linux processor combability mode configurations, to cause undetected data loss or errors when performing gzip compression using HW acceleration.
Title		IBM PowerVM Hypervisor data manipulation
First Time appeared		Ibm Ibm power9 System Firmware
Weaknesses		CWE-409
CPEs		cpe:2.3:o:ibm:power9_system_firmware:fw1050.00:::::::* cpe:2.3:o:ibm:power9_system_firmware:fw1050.30:::::::* cpe:2.3:o:ibm:power9_system_firmware:fw1060.00:::::::* cpe:2.3:o:ibm:power9_system_firmware:fw1060.20:::::::*
Vendors & Products		Ibm Ibm power9 System Firmware
References		https://www.ibm.com/support/pages/node/7229349
Metrics		cvssV3_1 `{'score': 4.5, 'vector': 'CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:C/C:N/I:L/A:L'}`

MITRE

Status: PUBLISHED

Assigner: ibm

Published: 2025-03-28T13:21:05.341Z

Updated: 2025-03-28T13:52:57.339Z

Reserved: 2025-02-03T13:48:40.108Z

Link: CVE-2025-0986

Vulnrichment

Updated: 2025-03-28T13:52:49.258Z

NVD

Status : Awaiting Analysis

Published: 2025-03-28T14:15:19.357

Modified: 2025-03-28T18:11:40.180

Link: CVE-2025-0986

Redhat

No data.

{"dataType": "CVE_RECORD", "dataVersion": "5.1", "cveMetadata": {"cveId": "CVE-2025-0986", "assignerOrgId": "9a959283-ebb5-44b6-b705-dcc2bbced522", "state": "PUBLISHED", "assignerShortName": "ibm", "dateReserved": "2025-02-03T13:48:40.108Z", "datePublished": "2025-03-28T13:21:05.341Z", "dateUpdated": "2025-03-28T13:52:57.339Z"}, "containers": {"cna": {"affected": [{"cpes": ["cpe:2.3:o:ibm:power9_system_firmware:fw1050.00:*:*:*:*:*:*:*", "cpe:2.3:o:ibm:power9_system_firmware:fw1050.30:*:*:*:*:*:*:*", "cpe:2.3:o:ibm:power9_system_firmware:fw1060.00:*:*:*:*:*:*:*", "cpe:2.3:o:ibm:power9_system_firmware:fw1060.20:*:*:*:*:*:*:*"], "defaultStatus": "unaffected", "product": "PowerVM Hypervisor", "vendor": "IBM", "versions": [{"lessThanOrEqual": "FW1050.30", "status": "affected", "version": "FW1050.00", "versionType": "semver"}, {"lessThanOrEqual": "FW1060.20", "status": "affected", "version": "FW1060.00", "versionType": "semver"}]}], "descriptions": [{"lang": "en", "supportingMedia": [{"base64": false, "type": "text/html", "value": "IBM PowerVM Hypervisor FW1050.00 through FW1050.30 and FW1060.00 through FW1060.20 could allow a local user, under certain Linux processor combability mode configurations, to cause undetected data loss or errors when performing gzip compression using HW acceleration."}], "value": "IBM PowerVM Hypervisor FW1050.00 through FW1050.30 and FW1060.00 through FW1060.20 could allow a local user, under certain Linux processor combability mode configurations, to cause undetected data loss or errors when performing gzip compression using HW acceleration."}], "metrics": [{"cvssV3_1": {"attackComplexity": "HIGH", "attackVector": "LOCAL", "availabilityImpact": "LOW", "baseScore": 4.5, "baseSeverity": "MEDIUM", "confidentialityImpact": "NONE", "integrityImpact": "LOW", "privilegesRequired": "NONE", "scope": "CHANGED", "userInteraction": "NONE", "vectorString": "CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:C/C:N/I:L/A:L", "version": "3.1"}, "format": "CVSS", "scenarios": [{"lang": "en", "value": "GENERAL"}]}], "problemTypes": [{"descriptions": [{"cweId": "CWE-409", "description": "CWE-409 Improper Handling of Highly Compressed Data (Data Amplification)", "lang": "en", "type": "CWE"}]}], "providerMetadata": {"orgId": "9a959283-ebb5-44b6-b705-dcc2bbced522", "shortName": "ibm", "dateUpdated": "2025-03-28T13:21:05.341Z"}, "references": [{"tags": ["vendor-advisory"], "url": "https://www.ibm.com/support/pages/node/7229349"}], "source": {"discovery": "UNKNOWN"}, "title": "IBM PowerVM Hypervisor data manipulation", "x_generator": {"engine": "Vulnogram 0.2.0"}}, "adp": [{"metrics": [{"other": {"type": "ssvc", "content": {"timestamp": "2025-03-28T13:52:45.513632Z", "id": "CVE-2025-0986", "options": [{"Exploitation": "none"}, {"Automatable": "no"}, {"Technical Impact": "partial"}], "role": "CISA Coordinator", "version": "2.0.3"}}}], "title": "CISA ADP Vulnrichment", "providerMetadata": {"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "shortName": "CISA-ADP", "dateUpdated": "2025-03-28T13:52:57.339Z"}}]}}

{"dataType": "CVE_RECORD", "containers": {"adp": [{"title": "CISA ADP Vulnrichment", "metrics": [{"other": {"type": "ssvc", "content": {"id": "CVE-2025-0986", "role": "CISA Coordinator", "options": [{"Exploitation": "none"}, {"Automatable": "no"}, {"Technical Impact": "partial"}], "version": "2.0.3", "timestamp": "2025-03-28T13:52:45.513632Z"}}}], "providerMetadata": {"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "shortName": "CISA-ADP", "dateUpdated": "2025-03-28T13:52:49.258Z"}}], "cna": {"title": "IBM PowerVM Hypervisor data manipulation", "source": {"discovery": "UNKNOWN"}, "metrics": [{"format": "CVSS", "cvssV3_1": {"scope": "CHANGED", "version": "3.1", "baseScore": 4.5, "attackVector": "LOCAL", "baseSeverity": "MEDIUM", "vectorString": "CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:C/C:N/I:L/A:L", "integrityImpact": "LOW", "userInteraction": "NONE", "attackComplexity": "HIGH", "availabilityImpact": "LOW", "privilegesRequired": "NONE", "confidentialityImpact": "NONE"}, "scenarios": [{"lang": "en", "value": "GENERAL"}]}], "affected": [{"cpes": ["cpe:2.3:o:ibm:power9_system_firmware:fw1050.00:*:*:*:*:*:*:*", "cpe:2.3:o:ibm:power9_system_firmware:fw1050.30:*:*:*:*:*:*:*", "cpe:2.3:o:ibm:power9_system_firmware:fw1060.00:*:*:*:*:*:*:*", "cpe:2.3:o:ibm:power9_system_firmware:fw1060.20:*:*:*:*:*:*:*"], "vendor": "IBM", "product": "PowerVM Hypervisor", "versions": [{"status": "affected", "version": "FW1050.00", "versionType": "semver", "lessThanOrEqual": "FW1050.30"}, {"status": "affected", "version": "FW1060.00", "versionType": "semver", "lessThanOrEqual": "FW1060.20"}], "defaultStatus": "unaffected"}], "references": [{"url": "https://www.ibm.com/support/pages/node/7229349", "tags": ["vendor-advisory"]}], "x_generator": {"engine": "Vulnogram 0.2.0"}, "descriptions": [{"lang": "en", "value": "IBM PowerVM Hypervisor FW1050.00 through FW1050.30 and FW1060.00 through FW1060.20 could allow a local user, under certain Linux processor combability mode configurations, to cause undetected data loss or errors when performing gzip compression using HW acceleration.", "supportingMedia": [{"type": "text/html", "value": "IBM PowerVM Hypervisor FW1050.00 through FW1050.30 and FW1060.00 through FW1060.20 could allow a local user, under certain Linux processor combability mode configurations, to cause undetected data loss or errors when performing gzip compression using HW acceleration.", "base64": false}]}], "problemTypes": [{"descriptions": [{"lang": "en", "type": "CWE", "cweId": "CWE-409", "description": "CWE-409 Improper Handling of Highly Compressed Data (Data Amplification)"}]}], "providerMetadata": {"orgId": "9a959283-ebb5-44b6-b705-dcc2bbced522", "shortName": "ibm", "dateUpdated": "2025-03-28T13:21:05.341Z"}}}, "cveMetadata": {"cveId": "CVE-2025-0986", "state": "PUBLISHED", "dateUpdated": "2025-03-28T13:52:57.339Z", "dateReserved": "2025-02-03T13:48:40.108Z", "assignerOrgId": "9a959283-ebb5-44b6-b705-dcc2bbced522", "datePublished": "2025-03-28T13:21:05.341Z", "assignerShortName": "ibm"}, "dataVersion": "5.1"}