Security Bulletin: This Power System update is being released to address CVE 2023-30438

Summary

An internally discovered vulnerability in PowerVM on IBM Power9 and Power10 systems could allow an attacker with privileged user access to a logical partition to perform an undetected violation of the isolation between logical partitions which could lead to data leakage or the execution of arbitrary code in other logical partitions on the same physical server.

Vulnerability Details

CVEID:CVE-2023-30438
**DESCRIPTION:**A vulnerability was identified in IBM PowerVM that could lead to an undetected violation of the isolation between partitions.
CVSS Base score: 9.3
CVSS Temporal Score: See: https://exchange.xforce.ibmcloud.com/vulnerabilities/252706 for the current score.
CVSS Vector: (CVSS:3.0/AV:L/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H)

Affected Products and Versions

For Power9 servers, only FW950 is supported but all firmware releases on the listed products are vulnerable.

See the PSIRT Q&A for more information.

Remediation/Fixes

IBM strongly recommends customers with the products below install FW950.71(950_124) or newer to remediate this vulnerability.

Power 9

1. IBM Power System L922 (9008-22L)

2. IBM Power System S922 (9009-22A, 9009-22G)

3. IBM Power System H922 (9223-22H, 9223-22S)

4. IBM Power System S914 (9009-41A, 9009-41G)

5. IBM Power System S924 (9009-42A, 9009-42G)

6. IBM Power System H924 (9223-42H, 9223-42S)

7. IBM Power System E950 (9040-MR9)

8. IBM Power System E980 (9080-M9S)

IBM strongly recommends customers with the products below install FW1010.51(1010_163), FW1030.11(1030_052) or newer to remediate this vulnerability.

Power 10

1. IBM Power System E1080 (9080-HEX)

IBM strongly recommends customers with the products below install FW1020.31(1020_102), FW1030.11(1030_058) or newer to remediate this vulnerability.

Power 10

1. IBM Power System S1022 (9105-22A)

2. IBM Power System S1024 (9105-42A)

3. IBM Power System S1022s (9105-22B)

4. IBM Power System S1014 (9105-41B)

5. IBM Power System L1022 (9786-22H)

6. IBM Power System L1024 (9786-42H)

7. IBM Power System E1050 (9043-MRX)

Workarounds and Mitigations

None