Insufficient Access Control in ALCPU's Core Temp Kernel Driver
CVE-2026-109836

8.4HIGH

Key Information:

Vendor

Alcpu

Status
Core Temp
Vendor
CVE Published:
3 November 2026

What is CVE-2026-109836?

The Core Temp kernel driver by ALCPU is exposed to insufficient access control in its IOCTL interface, which could potentially enable unauthorized access to physical memory. This vulnerability raises significant security concerns as it allows attackers to read or write sensitive information, compromising the integrity of the system and potentially leading to further exploitation.

Affected Version(s)

Core Temp 0 < 1.21

References

http://www.alcpu.com/CoreTemp
https://jvn.jp/en/jp/JVN23328936/

CVSS V4

Score:
8.4
Severity:
HIGH
Confidentiality:
High
Integrity:
High
Availability:
High
Attack Vector:
Local
Attack Complexity:
Low
Attack Required:
None
Privileges Required:
Undefined
User Interaction:
None

CVSS V3.0

Score:
6.7
Severity:
MEDIUM
Confidentiality:
High
Integrity:
High
Availability:
High
Attack Vector:
Local
Attack Complexity:
Low
Privileges Required:
High
User Interaction:
None
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.