CVE-2025-15038

Description

An Out-of-Bounds Read vulnerability exists in the ASUS Business System Control Interface driver. This vulnerability can be triggered by an unprivileged local user sending a specially crafted IOCTL request, potentially leading to a disclosure of kernel information or a system crash. Refer to the "Security Update for ASUS Business System Control Interface" section on the ASUS Security Advisory for more information.

PUBLISHED Reserved 2025-12-23 | Published 2026-03-12 | Updated 2026-03-12 | Assigner ASUS

Problem types

CWE-125 Out-of-bounds Read

Product status

References

www.asus.com/content/security-advisory

cve.org (CVE-2025-15038)

nvd.nist.gov (CVE-2025-15038)

Download JSON