216.73.216.67

CVE-2025-67246

· Published 15/01/2026 16:16 · Modified 16/01/2026 15:55

Labels: CVE-2025-67246 2026-01-15CVE-2025-67246CWE-269[email protected]

Essential information

Published
15/01/2026 16:16
Modified
16/01/2026 15:55
Author
Creator
CVSS
7.3 HIGH (v3.1)
CISA KEV
No
CWE
CVSS vector
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:L/A:N

CVSS metrics

Description

A local information disclosure vulnerability exists in the Ludashi driver before 5.1025 due to a lack of access control in the IOCTL handler. This driver exposes a device interface accessible to a normal user and handles attacker-controlled structures containing the lower 4GB of physical addresses. The handler maps arbitrary physical memory via MmMapIoSpace and copies data back to user mode without verifying the caller's privileges or the target address range. This allows unprivileged users to read arbitrary physical memory, potentially exposing kernel data structures, kernel pointers, security tokens, and other sensitive information. This vulnerability can be further exploited to bypass the Kernel Address Space Layout Rules (KASLR) and achieve local privilege escalation.

NVD status

Status
Awaiting Analysis — CVE has been recently published to the CVE List and has been received by the NVD.
Source
[email protected]
NVD
View on NVD

Affected products (CPE)

ProductCPE
ludashi / ludashi driver cpe:2.3:a:ludashi:ludashi_driver:<5.1025:*:*:*:*:*:*:*

References