CVE-2026-90975 | BDVDB-2026-401022 Detail

RealtekRtUsbA64.sys

Description#

A vulnerability in Realtek's RtUsbA64.sys USB audio driver allows a local, low-privileged user to abuse a kernel I/O control (IOCTL) interface that acts on a caller-supplied user-mode pointer without proper validation or capture. By issuing crafted property requests an attacker can obtain kernel-mode read and write access, which can be leveraged for local privilege escalation and arbitrary kernel code execution.

Impact#

No impact statement in the source data.

Weaknesses#

CWE-822

References#

https://www.nozominetworks.com/labs/vulnerability-advisories-cve-2026-90975
https://www.kb.cert.org/vuls/id/701544

Exploit#

No public exploit known

History#

Version 12026-11-06Record published in the CVE List.