Track vulnerabilities like this one. Sign up free to get alerted when software you use is affected.
9.3

NovumOS lets user programs gain admin rights

CVE-2026-40317 · published 6 months ago
Summary

Versions of NovumOS before 0.24 let a normal program tell the operating system to jump to any address, including privileged code. This can let a user‑level program run with full system control. Update to version 0.24 or run the system without user‑mode processes until you can apply the update.

What to do
  • Update minecanton209 novumos to version 0.24 or later.
Affected software
VendorProductAffected versions
minecanton209 novumos < 0.24
cpe:2.3:o:minecanton209:novumos:*:*:*:*:*:*:*:*
Original advisory text
NovumOS has Privilege Escalation in the Syscall Interface
NovumOS is a custom 32-bit operating system written in Zig and x86 Assembly. In versions prior to 0.24, Syscall 12 (JumpToUser) accepts an arbitrary entry point address from user-space registers without validation, allowing any Ring 3 user-mode process to jump to kernel addresses and execute arbitrary code in Ring 0 context, resulting in local privilege escalation. This issue has been fixed in version 0.24. If developers are unable to immediately update, they should restrict syscall access by running the system in single-user mode without Ring 3, and disable user-mode processes by only running kernel shell with no user processes. This issue has been fixed in version 0.24.
References
Fix within
Internet-facing 14 days
Internal At next upgrade
  • Not known to be exploited
  • Needs hands-on effort to exploit
  • Gives an attacker full control
Severity
9.3 Critical
Exploitation
<1% chance of attack within 30 days
Type
CWE-20Improper Input Validation
CWE-269Improper Privilege Management
Timeline
Published18 Apr 2026
Updated4 Nov 2026
First seen18 Apr 2026
Sources
CVE-2026-40317 · NVD
CVE-2026-40317 · OSV
GHSA-xjx3-gjh9-45fm · GHSA
Track software like this
Free during beta