ASUS bsitf.sys (CVE-2026-13585): Arbitrary Physical Memory Mapping in ASUS Business/Software Manager kernel driver

Posted by Hayaturehman Ahmadzai on Jul 20

Hi all,



I'm disclosing a vulnerability (CVE-2026-13585) in the ASUS bsitf.sys /

AsusBSItf.sys kernel driver, shipped with ASUS Business Manager and

Software Manager. ASUS has assigned the CVE and published a vendor advisory

with countermeasures.



Summary: The driver exposes a device (\\.\bsitf, admin-required to open)

with an IOCTL that allocates a caller-specified amount of physically

contiguous kernel memory, maps it into the calling...