CVE-2026-80115

Name of the Vulnerable Software and Affected Versions PassMark PerformanceTest versions prior to 11.1 build 1012 BurnInTest versions prior to 11.1 build 1000 OSForensics versions prior to 11.1 build 1016

Description A privilege escalation and denial-of-service issue exists in the DirectIo64.sys driver. Local attackers can exploit exposed IOCTLs (Input/Output Control codes) due to insufficient blocklist enforcement to read arbitrary Model-Specific Registers (MSRs) or write zero to any MSR. Model-Specific Registers are system registers used for toggling and monitoring specific processor features. By using the unrestricted write IOCTL, an attacker can zero out the system call handler MSR, leading to an immediate unrecoverable kernel crash upon the next system call, or read security-sensitive MSRs to locate kernel data structures.

Recommendations Update PassMark PerformanceTest to version 11.1 build 1012 or later. Update BurnInTest to version 11.1 build 1000 or later. Update OSForensics to version 11.1 build 1016 or later.