CVE-2022-22445

published 2022-07-18

CVE-2022-22445: An attacker that gains service access to the FSP (POWER9 only) or gains admin authority to a partition can compromise partition firmware.

medium 6.5 CVSS 3.1

AV N AC L PR L UI N S U C N I H A N

An attacker that gains service access to the FSP (POWER9 only) or gains admin authority to a partition can compromise partition firmware.

Affected

4 ranges

Vendor	Product	Version range	Fixed in
ibm	powervm_hypervisor	—	—
ibm	powervm_hypervisor	—	—
ibm	powervm_hypervisor	>= fw1010 < fw1010.32	fw1010.32
ibm	powervm_hypervisor	>= fw950 < fw950.40	fw950.40