NovumOS, a custom 32-bit OS written in Zig and x86 Assembly, contains a vulnerability in versions before 0.24 where Syscall 15 (MemoryMapRange) permits Ring 3 processes to map arbitrary virtual memory ranges without restricting access to critical kernel structures such as the IDT, GDT, TSS, and page tables. This lack of validation allows local attackers to alter kernel interrupt handlers, resulting in privilege escalation from user mode to kernel context. The issue is addressed in version 0.24.

Successful exploitation allows a local attacker to escalate privileges from user mode to kernel mode by modifying kernel interrupt handlers. This compromises system integrity and confidentiality by granting unauthorized kernel-level access. There are no reports of active exploitation in the wild.

Upgrade NovumOS to version 0.24 or later, where this vulnerability is fixed. Since the vendor advisory confirms the issue is resolved in 0.24, applying this official fix is the recommended remediation. Patch status is confirmed by the vendor advisory stating the fix in version 0.24.