IBM AIX/VIOS: Attackers can block resources
IBM developers have secured the AIX operating system against potential attacks.
(Image: Shutterstock)
If attacks on IBM AIX/VIOS are successful, operational errors can occur, among other things. Security updates have now been released.
As indicated in a warning message, several modules of the Python component such as Expat and SQLite are affected. One vulnerability (CVE-2025-6965) is considered “critical.” After successful attacks, memory problems (memory corruption) occur.
Videos by heise
Install security patches.
If attackers exploit another vulnerability (CVE-2025-59375, rated “high”), they can block memory resources. According to the developers, AIX 7.3 and VIOS 4.1 are impacted. The developers state that python3.9.base 3.9.23.0 and python3.11.base 3.11.13.0 are equipped to handle the described attacks. So far, there are no reports of ongoing attacks.
Only recently, IBM developers resolved security issues in AIX and QRadar SIEM.
(des)