The MBStorage DRAM lighting control module within Gigabyte Control Center contains an improper access control vulnerability (CWE-782). Authenticated local users can exploit this by sending crafted IOCTL commands through the MyPortIO_x64.sys driver bundled with the module. This enables arbitrary reading and writing of physical memory, resulting in kernel-level privilege escalation. The vulnerability is tracked as CVE-2026-9492 with a CVSS 4.0 score of 8.5 (high severity). No vendor advisory or patch information is currently available.

Exploitation allows an authenticated local attacker to gain kernel-level privileges by arbitrarily reading and writing physical memory via the vulnerable IOCTL interface. This can lead to full system compromise, bypassing security controls and potentially enabling persistence or further attacks.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until a fix is available, restrict local access to trusted users only and monitor for suspicious activity related to the MyPortIO_x64.sys driver usage.