This vulnerability affects Almico Speedfan 4.52, specifically the KiSystemCall64 function in the speedfan.sys driver related to the MSR Index Handler component. A local attacker with high privileges can manipulate this function to cause a memory leak. The vulnerability does not require user interaction and does not affect confidentiality, integrity, or availability directly, but may lead to resource exhaustion. Exploit code has been publicly released. The vendor has not provided any response or patch at the time of publication.

The impact is limited to a memory leak caused by local manipulation of the KiSystemCall64 function in speedfan.sys. This could lead to resource exhaustion on the affected system. There is no indication of privilege escalation, data compromise, or remote exploitation. The vulnerability requires local high-privilege access to exploit.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Since the vendor has not responded and no official fix is available, users should limit local access to trusted users only and monitor for unusual resource usage related to Speedfan. Consider disabling or uninstalling Speedfan 4.52 if feasible until a patch is released.