IBM Support

New Microcode for Firmware 950 .. 950.H3

Notification


Risk classification

HIPER (High Impact and/or Pervasive)

Abstract

The latest service pack 950.H3 is now available for system firmware levels VL950, VM950, and VH950.
 
 

This service pack addresses the following issues:

IMPORTANT NOTE: Some of these issues are deferred fixes such that the security issue is not fully mitigated until a re-ipl of the system has been completed

The following fixes are being released to mitigate management network attacks against the service processor:

  • A security problem was fixed for CVE-2026-16687
  • A security problem was fixed for CVE-2026-16835
  • A security problem was fixed for CVE-2026-16832
  • A security problem was fixed for CVE-2026-18848
  • A security problem was fixed for CVE-2026-16828

  • A security problem was fixed for CVE-2026-18681

    The following fixes are being released to mitigate service processor attacks against the host:

  • A security problem was fixed for CVE-2026-16938
  • A security problem was fixed for CVE-2026-16933
  • A security problem was fixed for CVE-2026-17429
  • A security problem was fixed for CVE-2026-16707
  • A security problem was fixed for CVE-2026-17100
  • A security problem was fixed for CVE-2026-16661
  • A security problem was fixed for CVE-2026-17093

The following fixes are being released to mitigate host network attacks against a partition:

  • A security problem was fixed for CVE-2026-18821
  • A security problem was fixed for CVE-2026-17028
  • A security problem was fixed for CVE-2026-17414

The following fixes are being released to mitigate a guest partition attacking the host firmware/hypervisor:

  • A security problem was fixed for CVE-2026-17042
  • A security problem was fixed for CVE-2026-17091
  • A security problem was fixed for CVE-2026-17097

Others:

  • A security problem was fixed for CVE-2026-4936. A re-IPL of the system is required for the security fix to take effect.
  • A security problem was fixed for CVE-2026-4937. The corresponding security bulletin includes additional details on how to complete the mitigation.
  • A security problem was fixed for CVE-2026-45447
  • A security problem was fixed for CVE-2026-52943, CVE-2026-43373, CVE-2026-43194
Visit Fix Central for all the latest updates.

Date first published

15 August 2026

[{"Line of Business":{"code":"LOB68","label":"Power HW"},"Business Unit":{"code":"BU070","label":"IBM Infrastructure"},"Risk Classification":"HIPER","Product":{"code":"TI000B2","label":"IBM Power System S914 (9009-41G)"},"ARM Category":[{"code":"","label":""}],"Platform":[{"code":"PF025","label":"Platform Independent"}],"Version":"All Versions"},{"Line of Business":{"code":"LOB68","label":"Power HW"},"Business Unit":{"code":"BU070","label":"IBM Infrastructure"},"Risk Classification":"HIPER","Product":{"code":"TI000B1","label":"Power System S922 Server (9009-22G)"},"ARM Category":[{"code":"","label":""}],"Platform":[{"code":"PF025","label":"Platform Independent"}],"Version":"All Versions"},{"Line of Business":{"code":"LOB68","label":"Power HW"},"Business Unit":{"code":"BU070","label":"IBM Infrastructure"},"Risk Classification":"HIPER","Product":{"code":"TI000B3","label":"Power System S924 Server (9009-42G)"},"ARM Category":[{"code":"","label":""}],"Platform":[{"code":"PF025","label":"Platform Independent"}],"Version":"All Versions"},{"Line of Business":{"code":"LOB68","label":"Power HW"},"Business Unit":{"code":"BU070","label":"IBM Infrastructure"},"Risk Classification":"HIPER","Product":{"code":"TI000B4","label":"Power System H922 Server (9223-22S)"},"ARM Category":[{"code":"","label":""}],"Platform":[{"code":"PF025","label":"Platform Independent"}],"Version":"All Versions"},{"Line of Business":{"code":"LOB68","label":"Power HW"},"Business Unit":{"code":"BU070","label":"IBM Infrastructure"},"Risk Classification":"HIPER","Product":{"code":"TI000B5","label":"Power System H924 Server (9223-42S)"},"ARM Category":[{"code":"","label":""}],"Platform":[{"code":"PF025","label":"Platform Independent"}],"Version":"All Versions"},{"Line of Business":{"code":"LOB68","label":"Power HW"},"Business Unit":{"code":"BU070","label":"IBM Infrastructure"},"Risk Classification":"HIPER","Product":{"code":"TI0007E","label":"Power System E950 Server (9040-MR9)"},"ARM Category":[{"code":"","label":""}],"Platform":[{"code":"PF025","label":"Platform Independent"}],"Version":"All Versions"},{"Line of Business":{"code":"LOB68","label":"Power HW"},"Business Unit":{"code":"BU070","label":"IBM Infrastructure"},"Risk Classification":"HIPER","Product":{"code":"TI0007I","label":"Power System E980 Server (9080-M9S)"},"ARM Category":[{"code":"","label":""}],"Platform":[{"code":"PF025","label":"Platform Independent"}],"Version":"All Versions"}]

Document Information

Modified date:
15 August 2026

UID

ibm17283172

Page Feedback