CVE-2026-80113: Exposed IOCTL with Insufficient Access Control in PassMark Software PerformanceTest

PassMark PerformanceTest before 11.1 build 1012, BurnInTest before 11.1 build 1000, and OSForensics before 11.1 build 1016 contain a privilege escalation vulnerability in the DirectIo64.sys driver. The vulnerability arises from an exposed IOCTL handler that does not validate the physical address parameter, enabling local users with a device handle to invoke MmMapIoSpace with an arbitrary 64-bit physical address and bit index. This allows clearing bits in kernel code pages or page table entries, facilitating local privilege escalation or system compromise.

An attacker with local access can exploit this vulnerability to modify kernel memory by clearing bits at arbitrary physical addresses. This can lead to privilege escalation, allowing the attacker to gain higher system privileges or potentially compromise the entire system.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. No official fix or patch links are provided in the available data. Until a patch is available, restrict local access to trusted users only.