Track vulnerabilities like this one.
Sign up free to get alerted when software you use is affected.
9.0
CVE-2026-40572: NovumOS lets user apps overwrite kernel memory
CVE-2026-40572 · published 6 months ago
Summary
Versions of NovumOS before 0.24 let ordinary programs place data into any area of memory, including parts that control the core of the operating system. This can let an attacker change how the system responds to events and gain full system control. Install NovumOS version 0.24 or later to stop the risk.
What to do
- Update minecanton209 novumos to version 0.24 or later.
Affected software
| Vendor | Product | Affected versions |
|---|---|---|
| minecanton209 | novumos |
< 0.24 cpe:2.3:o:minecanton209:novumos:*:*:*:*:*:*:*:* |
Original advisory text
NovumOS has Arbitrary Memory Mapping via Syscall 15 (MemoryMapRange)
NovumOS is a custom 32-bit operating system written in Zig and x86 Assembly. In versions prior to 0.24, Syscall 15 (MemoryMapRange) allows Ring 3 user-mode processes to map arbitrary virtual address ranges into their address space without validating against forbidden regions, including critical kernel structures such as the IDT, GDT, TSS, and page tables. A local attacker can exploit this to modify kernel interrupt handlers, resulting in privilege escalation from user mode to kernel context. This issue has been fixed in version 0.24.
References
- https://github.com/MinecAnton209/NovumOS/releases/tag/v0.24 Release Notes
- https://github.com/MinecAnton209/NovumOS/security/advisories/GHSA-rg7m-6vh7-f4v2 Exploit Vendor Advisory
- https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/40xxx/CVE-2026-40572... Vendor Advisory
- https://nvd.nist.gov/vuln/detail/CVE-2026-40572 Vendor Advisory
Internet-facing
14 days
Internal
At next upgrade
- Not known to be exploited
- Needs hands-on effort to exploit
- Gives an attacker full control
Type
CWE-269Improper Privilege Management
Timeline
Published18 Apr 2026
Updated29 Oct 2026
First seen18 Apr 2026
Track software like this
Free during beta