CVE-2025-51060

An issue was discovered in CPUID cpuz.sys 1.0.5.4. An attacker can use DeviceIoControl with the unvalidated parameters 0x9C402440 and 0x9C402444 as IoControlCodes to perform RDMSR and WRMSR, respectively. Through this process, the attacker can modify MSRLSTAR and hook KiSystemCall64. Afterward,...

CVE-2025-51060

An issue was discovered in CPUID cpuz.sys 1.0.5.4. An attacker can use DeviceIoControl with the unvalidated parameters 0x9C402440 and 0x9C402444 as IoControlCodes to perform RDMSR and WRMSR, respectively. Through this process, the attacker can modify MSRLSTAR and hook KiSystemCall64. Afterward,...

CVE-2025-51060

An issue was discovered in CPUID cpuz.sys 1.0.5.4. An attacker can use DeviceIoControl with the unvalidated parameters 0x9C402440 and 0x9C402444 as IoControlCodes to perform RDMSR and WRMSR, respectively. Through this process, the attacker can modify MSRLSTAR and hook KiSystemCall64. Afterward,...

CVE-2025-51060

CVE-2025-51060 affects CPUID cpuz.sys 1.0.5.4. The advisory describes unvalidated DeviceIoControl IOCTLs (0x9C402440 for RDMSR and 0x9C402444 for WRMSR) that let an attacker read/write MSR_LSTAR and overwrite KiSystemCall64. This enables a kernel-mode ROP chain that disables SMEP by modifying CR4...

Exploit for CVE-2025-51060

CVE-2025-51060 Proof of Concept PoC This repository contain...