The Ludashi driver versions before 5.1025 contain a local information disclosure vulnerability due to lack of access control in the IOCTL handler. The driver exposes a device interface accessible to normal users, which accepts attacker-controlled structures referencing physical memory addresses. The handler uses MmMapIoSpace to map arbitrary physical memory and copies data back to user mode without verifying privileges or address ranges. This allows unprivileged users to read arbitrary physical memory, potentially leaking kernel data structures, pointers, and security tokens. Such leakage can be leveraged to bypass KASLR and facilitate local privilege escalation.

Unprivileged local users can read arbitrary physical memory, exposing sensitive kernel information including data structures, pointers, and security tokens. This information disclosure can be used to bypass Kernel Address Space Layout Randomization (KASLR), increasing the risk of local privilege escalation attacks. The vulnerability does not directly allow code execution or denial of service but significantly compromises system confidentiality and security.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Since no patch or official fix information is provided, users should monitor vendor communications for updates. Until a fix is available, restrict local user access to the affected system and avoid running untrusted code with local user privileges.