gigabyte kernel driver lpe
Source Reddit ExploitDev
Rated by Threat Radar
Data as of 30 Sep 2026, 17:18 UTC
What to do
AI-suggested
Gigabyte has removed the vulnerable GVCIDrv64.sys driver and replaced it with GvVbiosDrv64.sys in BIOS utility version GBT_VGA_26.08.24.01. Users should update to this version or later to eliminate the vulnerable driver. No other mitigation is required as the vulnerable driver is no longer present in updated utilities.
Discussion
A local privilege escalation vulnerability exists in the Gigabyte BIOS utility kernel driver GVCIDrv64.sys. The driver exposes device interfaces with no access control, allowing any local user to perform arbitrary physical memory read/write and I/O port access. This enables an attacker to escalate privileges by manipulating process tokens and spawning a system shell. Gigabyte has removed the vulnerable driver and replaced it with a new driver in a later utility version.
r/ExploitDev (opens in a new tab)u/nanaynunay0 points0 comments
hi support pls https://github.com/mein-0/gvcidrv64/
Links cited in the discussion
Also discussed in r/cybersecurity