CVE-2021-38918 Security feature bypass in PowerVM Hypervisor
Attackers can violate isolation between peer virtual machines via specific management operations, compromising security boundaries in IBM PowerVM environments.
- Exploited in the wild
- Not known
- Login needed
- Not needed
- Attackable
- Over the internet
- Victim action needed
- Not needed
- Fix
- None listed
What is CVE-2021-38918?
CVE-2021-38918 is a high-severity vulnerability in IBM PowerVM Hypervisor, published on 5 Jan 2022. An attacker can exploit it over the internet without logging in, with no action from the victim.
Official description
IBM PowerVM Hypervisor FW860, FW940, FW950, and FW1010, through a specific sequence of VM management operations could lead to a violation of the isolation between peer VMs. IBM X-Force ID: 210019.
Which versions are affected by CVE-2021-38918?
It affects 1 product.
Products include Ibm Powervm Hypervisor.
How do I fix CVE-2021-38918?
No fix has been published for CVE-2021-38918 yet. Limit exposure of the affected software until one is available.
Is CVE-2021-38918 being exploited?
There is no known exploitation of CVE-2021-38918 in the wild and no public exploit code.
Other vulnerabilities in IBM PowerVM Hypervisor
Sources
Also known as GHSA-m8m5-5pw5-3xr7.