Insufficient access control in ALCPU Core Temp kernel driver IOCTL
Key facts
- Attack vector
- Local
- Privileges required
- High
- User interaction
- None
- Attack complexity
- Low
- Attack requirements
- None
- Impact type
- —
- Confidentiality · integrity · availability
- High · High · High
- Fix status
- Fixed
Attack profile from CVSS 4.0 · CNA. Fix status from CNA.
Summary
ALCPU's Core Temp kernel driver, from version 0 before 1.21, exposes an IOCTL with insufficient access control. A local user with high privileges can use it to read or write physical memory, which affects confidentiality, integrity and availability.
Written with Claude Haiku 5.5 from the sources below · 2026-11-04
Description from the CNA
The Core Temp kernel driver provided by ALCPU is vulnerable to insufficient access control in an exposed IOCTL, which may allow physical memory to be read or written.
Why it matters now
SSVC decision points
CISA ADP · SSVC 2.0.3
- Exploitation
- None
- Automatable
- No
- Technical impact
- Total
The decision (Track, Attend, Act) also depends on your mission and well-being impact; see CISA's SSVC guide.
Affected products
Remediation
Core Temp users should update to version 1.21 or later.
Written with Claude Haiku 5.5 from the sources below · 2026-11-04
- Fix · CNA Core Temp (ALCPU) Fixed in 1.21
Timeline
- 2026-11-03 Threatist record created from CVE-2026-109836
- 2026-11-04 Alias added: GHSA-8rm3-w4gx-f78w
- 2026-11-05 Priority changed: MEDIUM → LOW
- 2026-11-06 CISA SSVC decision points changed
References
Sources
- CVE-2026-109836 · CVE Program
- CVE-2026-109836 · NVD
- FIRST EPSS
- GHSA-8rm3-w4gx-f78w · GitHub Advisory Database · CC BY 4.0
This product uses the NVD API but is not endorsed or certified by the NVD. Sources and licences