CVE-2026-80113: Exposed IOCTL with Insufficient Access Control in PassMark Software PerformanceTest

The vulnerability exists in DirectIo64.sys used by PassMark PerformanceTest, BurnInTest, and OSForensics products before specified build versions. It arises from exposed IOCTL interfaces that do not validate parameters related to device selection, register offset, or values, allowing local attackers to obtain device handles and issue arbitrary PCI configuration space read/write commands. This enables attackers to escalate privileges by manipulating hardware-level configurations such as enabling Bus Master DMA, halting storage controller I/O, or remapping Base Address Registers to redirect DMA operations to attacker-controlled physical addresses. The vulnerability is tracked as CVE-2026-80113 with a CVSS score of 7.1 (AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:H). No known exploits in the wild or vendor patches are currently documented.

Successful exploitation allows a local user to escalate privileges by modifying hardware configurations at the PCI device level. This can result in enabling unauthorized DMA operations, disrupting storage controller I/O, or redirecting DMA to attacker-chosen physical memory addresses, potentially leading to system instability or compromise of system integrity. Confidentiality is not impacted, but integrity and availability are highly affected.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until a fix is available, restrict local user access to trusted personnel only and monitor for suspicious local activity related to PCI device configuration. Avoid running these affected software versions on systems where untrusted users have local access.