CVE-2026-17255 PUBLISHED

IBM i is Affected By Denial of Service Vulnerability []

Assigner: ibm
Reserved: 24.07.2026 Published: 04.09.2026 Updated: 04.09.2026

IBM i 7.6, 7.5, 7.4, and 7.3 could allow a remote attacker to cause a denial of service due to improper validation of the prefix length in ICMPv6 Router Advertisements.

Metrics

CVSS 3.1

CVSS Vector: CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L
CVSS Score: 4.3

Attack Vector	Adjacent Network	Scope	Unchanged
Attack Complexity	Low	Confidentiality Impact	None
Privileges Required	None	Integrity Impact	None
User Interaction	None	Availability Impact	Low

CVSS 3.1

Product Status

Vendor	IBM
Product	i
Versions	Version 7.6 is affected Version 7.5 is affected Version 7.4 is affected Version 7.3 is affected

Solutions

IBM i Release5770-999 PTF Number(s)PTF Download Link(s)7.6MJ11322 https://www.ibm.com/mysupport/s/fix-information?legacy=MJ11322 7.5MJ11323 https://www.ibm.com/mysupport/s/fix-information?legacy=MJ11323 7.4MJ11324 https://www.ibm.com/mysupport/s/fix-information?legacy=MJ11324 7.3MJ11325 https://www.ibm.com/mysupport/s/fix-information?legacy=MJ11325

IBM recommends users running unsupported versions of affected products upgrade to a supported and fixed version of affected products.

References

https://www.ibm.com/support/pages/node/7286093

Problem Types

CWE-787 Out-of-bounds Write CWE