CVE-2026-109836: High severity vulnerability

Published Nov 3, 2026

Updated

The Core Temp kernel driver provided by ALCPU is vulnerable to insufficient access control in an exposed IOCTL, which may allow physical memory to be read or written.

Event History

Nov 3, 2026

CVE Published

via MITRE·10:52 PM

Data Sourced

via MITRE·10:52 PM

DescriptionSeverity

Data Sourced

via NVD·11:17 PM

DescriptionSeverityWeakness

Frequently Asked Questions

Which systems are in scope?

Systems with the Core Temp kernel driver provided by ALCPU are in scope. The available data does not identify affected driver versions or configurations.

What access does an attacker need?

The CVSS vector indicates local access and high privileges are required. No user interaction is required.

Is this directly exploitable over the network?

The CVSS attack vector is local, not network-based. Exploitation requires an attacker to already have local access and high privileges.

CVE-2026-109836: High severity vulnerability

Event History

Frequently Asked Questions

Which systems are in scope?

What access does an attacker need?

Is this directly exploitable over the network?

Company

Resources

Contact

Frequently Asked Questions

Which systems are in scope?

What access does an attacker need?

Is this directly exploitable over the network?