CVE-2026-13198

Name of the Vulnerable Software and Affected Versions KUNBUS piControl version 2.6.2

Description A race condition exists in the event notification functionality. This occurs when a local authenticated attacker issues concurrent crafted requests from multiple threads through the piControl character device, leading to the corruption of the kernel heap and event-list state. This flaw can result in the disclosure of a small amount of adjacent kernel memory, kernel memory corruption, and a denial of service. A race condition is a situation where the system's substantive behavior is dependent on the sequence or timing of other uncontrollable events.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.