JVN#23328936
Core Temp kernel driver vulnerable to exposed IOCTL with insufficient access control

Overview

Core Temp kernel driver provided by ALCPU is vulnerable to exposed IOCTL with insufficient access control.

Products Affected

• Core Temp prior to v1.21

Description

Core Temp kernel driver provided by ALCPU contains the vulnerability listed below:

• Exposed IOCTL with Insufficient Access Control (CWE-782)
  • CVSS:4.0/AV:L/AC:L/AT:N/PR:H/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N Base Score 8.4
  • CVSS:3.0/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H Base Score 6.7
  • CVE-2026-109836

Impact

Physical memory may be read or written.

Solution

Update the Software
Update the software to the latest version according to the information provided by the developer.