PT-2026-33549 · Novumos · Novumos

Minecanton209 · Published 2026-04-18 · Updated 2026-04-20 · CVE-2026-40572

Positive Technologies (AI Summary)

CVSS v3.1

9.0

Critical

Base vector

AV:L/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:N

Name of the Vulnerable Software and Affected Versions NovumOS versions prior to 0.24

Description Syscall 15 ('MemoryMapRange') allows Ring 3 user-mode processes to map arbitrary virtual address ranges into their address space without validating against forbidden regions. This includes critical kernel structures such as the IDT (Interrupt Descriptor Table), GDT (Global Descriptor Table), TSS (Task State Segment), and page tables. A local attacker can exploit this to modify kernel interrupt handlers, resulting in privilege escalation from user mode to kernel context.

Recommendations Update to version 0.24.

Fix

LPE

Improper Privilege Management

Weakness Enumeration

CWE-269

Related Identifiers

CVE-2026-40572

Affected Products

Novumos

References · 6

• https://github.com/MinecAnton209/NovumOS/security/advisories/GHSA-rg7m-6vh7-f4v2 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2026-40572 · Security Note
• https://github.com/MinecAnton209/NovumOS/releases/tag/v0.24 · Note
• https://twitter.com/CVEnew/status/2045467338087055371 · Twitter Post
• https://twitter.com/0dayPublishing/status/2046245011977572519 · Twitter Post
• https://twitter.com/VulmonFeeds/status/2045319483837866283 · Twitter Post