Valkyrie Aurora
Monthly
Local privilege escalation in BioStar VALKYRIE AURORA 2.10.2411.0800 allows an authenticated low-privileged local attacker to abuse the BS_RVSIO64.sys IOCTL handler and manipulate a PhysicalAddress value, triggering a write-what-where condition in the kernel driver. Successful exploitation can corrupt kernel memory and elevate privileges to SYSTEM or administrator level on an affected host. Publicly available exploit code exists, and exploitation requires prior local code execution plus the vulnerable driver to be installed and loaded, making this a post-access escalation rather than a remote foothold.
Local privilege escalation in BioStar VALKYRIE AURORA 2.10.2411.0800 allows an authenticated low-privileged local attacker to abuse the BS_RVSIO64.sys IOCTL handler and manipulate a PhysicalAddress value, triggering a write-what-where condition in the kernel driver. Successful exploitation can corrupt kernel memory and elevate privileges to SYSTEM or administrator level on an affected host. Publicly available exploit code exists, and exploitation requires prior local code execution plus the vulnerable driver to be installed and loaded, making this a post-access escalation rather than a remote foothold.