How severe is CVE-2025-0986?

CVE-2025-0986 has a CVSS 3.x base score of 4.5, rated medium severity. It is exploitable over local access with high attack complexity, requires no privileges and no user interaction. Impact on confidentiality is none, integrity low, and availability low.

Is CVE-2025-0986 being actively exploited?

It is not currently listed in CISA's KEV catalog. Its EPSS exploit-prediction score is 0% (2nd percentile), an estimate of the probability of exploitation in the next 30 days.

What products are affected by CVE-2025-0986?

CVE-2025-0986 affects Ibm Powervm Hypervisor. See the affected-products list for the exact vulnerable versions.

How do I fix CVE-2025-0986?

Review the linked vendor and NVD advisories for patched versions and mitigations, then upgrade or apply the recommended workaround.

Does CVE-2025-0986 have an EU (EUVD) identifier?

Yes. CVE-2025-0986 is tracked in the ENISA EU Vulnerability Database (EUVD) as EUVD-2025-8616.

When was CVE-2025-0986 published?

CVE-2025-0986 was published on 2025-03-28 and last updated on 2026-06-17.

CVE-2025-0986

CVE-2025-0986 is a medium-severity vulnerability in Ibm Powervm Hypervisor with a CVSS 3.x base score of 4.5. It is not currently listed as actively exploited by CISA, and its EPSS exploit-prediction score is low. The underlying weakness is classified as CWE-409.

Key facts

Severity: Medium (CVSS 3.x base score 4.5)
EPSS exploit prediction: 0% (2nd percentile)
Actively exploited: Not listed in CISA KEV
EU (EUVD) id: EUVD-2025-8616
Weakness: CWE-409
Affected product: Ibm Powervm Hypervisor
Published: 2025-03-28
Last modified: 2026-06-17

Description

IBM PowerVM Hypervisor FW1050.00 through FW1050.30 and FW1060.00 through FW1060.20 could allow a local user, under certain Linux processor combability mode configurations, to cause undetected data loss or errors when performing gzip compression using HW acceleration.

Frequently asked questions

What is CVE-2025-0986?: IBM PowerVM Hypervisor FW1050.00 through FW1050.30 and FW1060.00 through FW1060.20 could allow a local user, under certain Linux processor combability mode configurations, to cause undetected data loss or errors when performing gzip compression using HW acceleration.
How severe is CVE-2025-0986?: CVE-2025-0986 has a CVSS 3.x base score of 4.5, rated medium severity. It is exploitable over local access with high attack complexity, requires no privileges and no user interaction. Impact on confidentiality is none, integrity low, and availability low.
Is CVE-2025-0986 being actively exploited?: It is not currently listed in CISA's KEV catalog. Its EPSS exploit-prediction score is 0% (2nd percentile), an estimate of the probability of exploitation in the next 30 days.
What products are affected by CVE-2025-0986?: CVE-2025-0986 affects Ibm Powervm Hypervisor. See the affected-products list for the exact vulnerable versions.
How do I fix CVE-2025-0986?: Review the linked vendor and NVD advisories for patched versions and mitigations, then upgrade or apply the recommended workaround.
Does CVE-2025-0986 have an EU (EUVD) identifier?: Yes. CVE-2025-0986 is tracked in the ENISA EU Vulnerability Database (EUVD) as EUVD-2025-8616.
When was CVE-2025-0986 published?: CVE-2025-0986 was published on 2025-03-28 and last updated on 2026-06-17.

References

https://www.ibm.com/support/pages/node/7229349

Affected products (1)

cpe:2.3:o:ibm:powervm_hypervisor:*:*:*:*:*:*:*:*

More vulnerabilities in Ibm Powervm Hypervisor

CVE-2023-30438 — Critical (CVSS 9.3): An internally discovered vulnerability in PowerVM on IBM Power9 and Power10 systems could allow an attacker with…
CVE-2021-38917 — Critical (CVSS 9.1): IBM PowerVM Hypervisor FW860, FW940, and FW950 could allow an attacker that gains service access to the FSP can read…
CVE-2021-38918 — High (CVSS 7.5): IBM PowerVM Hypervisor FW860, FW940, FW950, and FW1010, through a specific sequence of VM management operations could…
CVE-2025-36035 — Medium (CVSS 6.7): IBM PowerVM Hypervisor FW950.00 through FW950.E0, FW1050.00 through FW1050.50, and FW1060.00 through FW1060.40 could…
CVE-2023-30440 — Medium (CVSS 6.7): IBM PowerVM Hypervisor FW860.00 through FW860.B3, FW950.00 through FW950.70, FW1010.00 through FW1010.50, FW1020.00…
CVE-2022-22445 — Medium (CVSS 6.5): An attacker that gains service access to the FSP (POWER9 only) or gains admin authority to a partition can compromise…

All CVEs affecting Ibm Powervm Hypervisor →

Other CWE-409 vulnerabilities

CVE-2026-62963 — High (CVSS 8.7): Centrifugo is an open-source scalable real-time messaging server. Prior to 6.8.4, Centrifugo unidirectional WebSocket…
CVE-2026-55195 — High (CVSS 8.7): py7zr is a Python-based library and utility to support 7zip archive compression, decompression, encryption and…
CVE-2026-53430 — High (CVSS 8.7): Improper Handling of Highly Compressed Data (Data Amplification) vulnerability in elixir-grpc grpc…
CVE-2026-44697 — High (CVSS 8.6): Klever-Go is the Go implementation of the Klever blockchain protocol. Prior to 1.7.17, a remote, unauthenticated…
CVE-2026-44981 — High (CVSS 8.2): CrowdSec offers crowdsourced protection against malicious IPs. From 1.7.0 until 1.7.8, the LAPI router used…
CVE-2026-43970 — High (CVSS 8.2): Improper Handling of Highly Compressed Data (Data Amplification) vulnerability in ninenines cowlib allows…

Browse all CWE-409 vulnerabilities →