Allele Security Alert
ASA-2018-00009, CVE-2018-10711, CORE-2018-0005
Drivers allow non-privileged user arbitrary access to MSRs
The vulnerability described in this alert affects the drivers AsrDrv101.sys and AsrDrv102.sys. They are installed by the following ASRock utilities:
ASRock RGBLED before v22.214.171.124
A-Tuning before v3.0.210
F-Stream before v3.0.210
RestartToUEFI before v126.96.36.199
ASRock RGBLED v1.0.36
Proof of concept
The drivers affected expose to a non-privileged user arbitrary access to MSRs (Machine Specific Registers) through ioctl() system call. The ioctl arguments are 0x222848 and 0x22284C.
Access to MSRs allow an attacker to directly tinker with the system and take advantage in several ways. This vulnerability allows an attacker to achieve privilege escalation, information leakage, denial of service and not limited to bypassing of mitigations and protections imposed by operating system.
Diego Juarez (SecureAuth) and Leandro Cuozzo (SecureAuth)
ASRock Drivers Elevation of Privilege Vulnerabilities
[FD] [CORE-2018-0005] – ASRock Drivers Elevation of Privilege Vulnerabilities
If there is any error in this alert or you wish a comprehensive analysis, let us know.
Last modified: February 3, 2019