Signal is active with 1 mentions in latest observed window
Recommended action window: Monitor and triage in normal cycle
NVD description
AsrDrv103.sys in the ASRock RGB Driver does not properly restrict access from user space, as demonstrated by triggering a triple fault via a request to zero CR3.
Priority
LOW
Exploitation
NONE
PoC
NONE
Patch
NONE
Momentum
NONE
If you run products in this scope, you should treat this CVE as relevant to your environment.
1 version affected across 2 products
@9Syht @lumbogg TL;DR you are more likely to have a more dangerous driver already installed, you just don't know about it because it's not highly advertised. Just the most recent example: https://www.sentinelone.com/vulnerability-database/cve-2020-15368/
2 of 2 entries
| Part | Vendor | Product | Version | Target SW | Target HW |
|---|---|---|---|---|---|
| HW | asrock | rgb_driver | - | - | - |
| OS | asrock | rgb_driver_firmware | - | - | - |