PT-2025-31967 · Cpuz.Sys · Cpuz.Sys

Zialib · Published 2025-08-05 · Updated 2025-10-09 · CVE-2025-51060

Positive Technologies (AI Summary)

CVSS v3.1

6.5

Medium

Base vector

AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:N

Name of the Vulnerable Software and Affected Versions cpuz.sys version 1.0.5.4

Description An attacker can use DeviceIoControl with unvalidated parameters 0x9C402440 and 0x9C402444 as IoControlCodes to perform RDMSR and WRMSR, respectively. This allows modification of MSR LSTAR and hooking of KiSystemCall64. Utilizing Return-Oriented Programming (ROP), the attacker can manipulate the stack with pre-prepared gadgets, disable the SMAP flag in the CR4 register, and execute a user-mode syscall handler in the kernel context. This issue functions on 64-bit Windows if core isolation is absent or disabled.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Exploit

Improper Access Control

Weakness Enumeration

CWE-284

Related Identifiers

BDU:2025-10447

CVE-2025-51060

Affected Products

Cpuz.Sys

References · 10

• 🔥 https://github.com/ZiaLib/Zmsr · Exploit
• https://bdu.fstec.ru/vul/2025-10447 · Security Note
• https://nvd.nist.gov/vuln/detail/CVE-2025-51060 · Security Note
• https://osv.dev/vulnerability/CVE-2025-51060 · Vendor Advisory
• http://cpuid.com · Note
• https://t.me/CVEtracker/29225 · Telegram Post
• https://twitter.com/CVEnew/status/1952798178245329191 · Twitter Post
• http://cpuzsys.com · Note
• https://t.me/cveNotify/138032 · Telegram Post
• https://vuldb.com/?id.318866 · Note