Motherboards Firmware
Monthly
Kernel-level privilege holders on affected ASUS motherboards can supply an arbitrary memory address through an I/O command to the board firmware, which then dereferences the untrusted pointer, allowing tampering with system information or crashing the system. The flaw is local-only and requires high privileges (ring-0) to reach, so it is not remotely or unauthenticated-reachable; integrity and availability are impacted while confidentiality is untouched. No public exploit code or active exploitation has been identified at time of analysis, EPSS is negligible (0.11%, 1st percentile), and ASUS has published fixed firmware per board series.
Kernel-level privilege holders on affected ASUS motherboards can supply an arbitrary memory address through an I/O command to the board firmware, which then dereferences the untrusted pointer, allowing tampering with system information or crashing the system. The flaw is local-only and requires high privileges (ring-0) to reach, so it is not remotely or unauthenticated-reachable; integrity and availability are impacted while confidentiality is untouched. No public exploit code or active exploitation has been identified at time of analysis, EPSS is negligible (0.11%, 1st percentile), and ASUS has published fixed firmware per board series.