CVE-2025-3464-AsIO3-LPE

CVE-2025-3464-AsIO3-LPE CVE-2025-3464：针对 ASUS AsIO3.sys 的非特权 LPE 漏洞利用程序 - TOCTOU 认证绕过 + PreviousMode 递减 CVE-2025-3464：AsIO3.sys 本地权限提升漏洞利用 此漏洞利用程序仅适用于 Windows 11 22H2 或更早版本。Microsoft 已修复 PreviousMode 相关的把戏。 针对 ASUS AsIO3.sys 驱动的本地权限提升漏洞利用程序，可获得 NT AUTHORITY\SYSTEM 权限 概述...

CVE-2026-80774

CVE-2026-80774 affects the Linux kernel in the HID asus driver. The root cause is that to_usb_interface() is called without first verifying the device is genuinely USB via hid_is_usb(). Because the uhid subsystem can create devices that report BUS_USB but lack an actual USB parent, this unchecked...

CVE-2026-80774 HID: asus: fix missing hid_is_usb() check

In the Linux kernel, the following vulnerability has been resolved: HID: asus: fix missing hidisusb check tousbinterface can only be used on a hiddevice whose parent is really USB; uhid can create devices that identify as being on BUSUSB, but don't actually have a USB parent. Fix the use of...

Linux Distros Unpatched Vulnerability : CVE-2026-80774

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - HID: asus: fix missing hidisusb check tousbinterface can only be used on a hiddevice whose parent is really USB; uhid can create devices that identify as being ...

CVE-2026-31524

A flaw was found in the Linux kernel's Human Interface Device HID subsystem, specifically within the ASUS HID driver. The asusreportfixup function did not properly manage allocated memory, resulting in a memory leak CWE-401. This issue could allow a local attacker to consume system resources,...

CVE-2025-15037

An Incorrect Permission Assignment vulnerability exists in the ASUS Business System Control Interface driver. This vulnerability can be triggered by an unprivileged local user sending a specially crafted IOCTL request, potentially leading to unauthorized access to sensitive hardware resources and...

Decrement by one to rule them all: AsIO3.sys driver exploitation

Introduction Armoury Crate and AI Suite are applications used to manage and monitor ASUS motherboards and related components such as the processor, RAM or the increasingly popular RGB lighting. These types of applications often install drivers in the system, which are necessary for direct...

kernel: hid: Use After Free in asus_remove()

A use-after-free flaw was found in asuskbdbacklightset in drivers/hid/hid-asus.c in the Linux Kernel. This issue could allow an attacker to crash the system when plugging in or disconnecting a malicious USB device, which may lead to a kernel information leak problem...

kernel: hid: Use After Free in asus_remove()

A use-after-free flaw was found in asuskbdbacklightset in drivers/hid/hid-asus.c in the Linux Kernel. This issue could allow an attacker to crash the system when plugging in or disconnecting a malicious USB device, which may lead to a kernel information leak problem...