This vulnerability (CVE-2026-8035) arises from improper input validation in the NI-PAL kernel driver, which can lead to a NULL pointer dereference when exploited by a local authenticated user. This results in a denial of service condition by crashing the affected system. The issue affects NI-PAL versions 26.3.0 and prior on both Windows and Linux platforms. The CVSS 4.0 vector indicates local attack vector with low complexity, no user interaction required, and high impact on integrity and availability. No patch or official remediation level has been disclosed by the vendor at this time.

A local authenticated user can cause a denial of service by crashing the system due to a NULL pointer dereference in the NI-PAL kernel driver. This impacts system availability but does not indicate privilege escalation or data confidentiality compromise. There are no known exploits in the wild, and the vulnerability is rated medium severity.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until an official fix is released, limiting local authenticated user access to trusted personnel and monitoring for unusual system crashes may reduce risk. No vendor-provided mitigation or temporary fix is currently available.