CVE-2026-13197

Name of the Vulnerable Software and Affected Versions KUNBUS piControl version 2.6.2

Description A race condition exists in the configuration and process-image management functionality. This occurs when a local authenticated attacker sends concurrent crafted requests through the piControl character device, triggering use-after-free and invalid pointer dereferences on kernel configuration objects. This leads to kernel memory corruption and a denial of service. A race condition is a situation where the system's substantive behavior is dependent on the sequence or timing of other uncontrollable events.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.