CVE-2026-8035Disclosure(linux / linux_kernel)

LOWCVSS 5.5 · MEDIUM

Exploit discussion active in current signal (1 latest mentions)

Immediate actions

Hunt for exploitation attempts and persistence artifacts
Increase monitoring for publicly documented tradecraft
Track advisory updates for patch or workaround availability

Recommended action window: High priority (within 72h)

NVD description

Improper input validation in the NI-PAL kernel driver may allow a local authenticated user to cause a denial of service by triggering a crash due to a NULL pointer dereference. This vulnerability affects NI-PAL 26.3.0 and prior versions on Windows and Linux.

linux CVEs Back to dashboard

2.5/ 10 priority

Sources & remediation

Vendor / third-party advisories

https://www.ni.com/en/support/security/available-critical-and-security-updates-for-ni-software/2026/invalid-input-validation-vulnerabilities-in-ni-pal.html

Weakness type (CWE)

CWE-476

Priority

LOW

Exploitation

NONE

PoC

YES

Patch

NONE

Momentum

STABLE

Are you affected?

If you run products in this scope, you should treat this CVE as relevant to your environment.

linux_kernel
linux_real-time
ni-pal
windows

Threat summary

Public PoC is present in monitored signal
3 mentions across 3 observed days
Momentum state: stable

What's happening

PoC mentioned or linked in 1 signal
Technical details provided in 3 signals
Disclosure: 2 classified signals
General: 1 classified signal
Peaked 2d ago at 1 mentions (2026-06-02); latest day: 1
3 total mentions across 3 days

Affected systems

Vendors

linux microsoft ni

Products

linux_kernellinux_real-timeni-palwindows

1 version affected across 4 products

Deep dive

Activity timeline3 mentions / 3d

Signal classification2 categories

Disclosure

266.7%

General

133.3%

Referenced assets2 URLs

By indicator

Classification over time

Date	Total	Labels

2026-06-02	1	Disclosure1
2026-06-04	1	Disclosure1
2026-07-25	1	General1

Full discourse3 posts

impulsive@weezerOSINT135d
Disclosure
CVE-2026-8036 8.4: the driver lets any local user read and write anywhere in physical memory. any address. any size. no admin needed. CVE-2026-8035 7.1: one malformed request to the driver. instant bluescreen. any local user. LOLDrivers issue: https://github.com/magicsword-io/LOLDrivers/issues/303
Post summary
The excerpt announces two local privilege escalation issues (CVE-2026-8036 and CVE-2026-8035) in a driver, details their impact and severity, and references a GitHub issue for further discussion.
100183845
10.6K followersView on X
DFIR Lab@DFIR_Lab84d
General
🚨 CVE-2026-8035 | CVSS 7.1 HIGH NI-PAL kernel driver flaw allows local authenticated users to trigger DoS via NULL pointer dereference. Affects v26.3.0 and prior on Windows/Linux. #CVE #Vulnerability #PatchNow #ThreatIntel https://t.co/10QA4Bx1wx
Post summary
The tweet announces CVE-2026-8035, a high severity DoS flaw in the NI‑PAL kernel driver affecting Windows/Linux versions 26.3.0 and earlier, but provides no exploit, patch or active exploitation details.
0000045
96 followersView on X
Vulmon Vulnerability Feed@VulmonFeeds137d
Disclosure
CVE-2026-8035 Denial of Service via NULL Pointer Dereference in NI-PAL Kernel Driver 26.3.0 https://vulmon.com/vulnerabilitydetails?qid=CVE-2026-8035
Post summary
The text announces the discovery of CVE-2026-8035, describing a DOS vulnerability in NI‑PAL Kernel Driver 26.3.0.
0000047
4.0K followersView on X

CPE platform detail4 entries

Part:

Vendor:

Product:

Version:

Target SW:

Target HW:

4 of 4 entries

Part	Vendor	Product	Version	Target SW	Target HW
OS	linux	linux_kernel	-	-	-
OS	microsoft	windows	-	-	-
OS	ni	linux_real-time	-	-	-
App	ni	ni-pal	-	-	-

Explore more

Back to dashboard linux CVEs microsoft CVEs ni CVEs linux_kernel vulnerabilities