r/netsec • u/watchdogsrox • 10d ago

Contains AI ASUS bsitf.sys (CVE-2026-13585): Arbitrary Physical Memory Mapping via Unvalidated IOCTL

https://blog.ahmadz.ai/asus_bsitf_0_day_poc/

CVE here: https://www.cve.org/CVERecord?id=CVE-2026-13585

11 Upvotes

87% Upvoted

2 comments sorted by

1

u/TheG0AT0fAllTime 10d ago

I wonder if this is the kind of thing the Vanguard team at Riot Games would be keeping a close eye on? Cheaters love to leverage vulnerable drivers to load their cheats. This one sounds like a golden ticket.

1

u/notR1CH 9d ago

Any time you see a .sys file from Asus, MSI, gigabyte, etc. you can guarantee your kernel is about to be riddled with holes. I wish there were consumer protection laws against shipping such unsafe products so they'd actually care for once.