Denial of Service Vulnerability in Realtek NDIS Usermode IO Driver
CVE-2025-60419

6.2MEDIUM

Key Information:

Vendor

Realtek

Status
NDIS Usermode IO Driver
Vendor
CVE Published:
24 October 2025

What is CVE-2025-60419?

An issue in the Realtek NDIS Usermode IO driver allows local authenticated users to exploit a weakness by sending a specially crafted IOCTL request. This action can lead to service interruptions, rendering the system unable to process requests effectively and impacting overall functionality.

References

http://realtek.com
http://ndis.com
https://splineuser.github.io/posts/RTKVuln/

CVSS V3.1

Score:
6.2
Severity:
MEDIUM
Confidentiality:
None
Integrity:
None
Availability:
None
Attack Vector:
Local
Attack Complexity:
Low
Privileges Required:
None
User Interaction:
None
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

JSON
.