Linux CVE-2025-15037

Incorrect Permission Assignment for Critical Resource (CWE-732)

2026-03-12 54bf65a7-a193-42d2-b1ba-8e150d3c35e1

Linux RCE Information Disclosure

Lifecycle Timeline

Analysis Generated

Mar 12, 2026 - 19:57 vuln.today

CVE Published

Mar 12, 2026 - 03:15 nvd

N/A

DescriptionCVE.org

An Incorrect Permission Assignment vulnerability exists in the ASUS Business System Control Interface driver. This vulnerability can be triggered by an unprivileged local user sending a specially crafted IOCTL request, potentially leading to unauthorized access to sensitive hardware resources and kernel information disclosure. Refer to the "ASUS Business System Control Interface" section on the ASUS Security Advisory for more information.

AnalysisAI

An Incorrect Permission Assignment vulnerability exists in the ASUS Business System Control Interface driver.

Technical ContextAI

Classified as CWE-732 (Incorrect Permission Assignment for Critical Resource). An Incorrect Permission Assignment vulnerability exists in the ASUS Business System Control Interface driver. This vulnerability can be triggered by an unprivileged local user sending a specially crafted IOCTL request, potentially leading to unauthorized access to sensitive hardware resources and kernel information disclosure. Refer to the "ASUS Business System Control Interface" section on the ASUS Security Advisory for more information.