Local Privilege Escalation Vulnerability in Realtek USB Audio Driver

CVE-2026-90975

What is CVE-2026-90975?

The RtUsbA64.sys USB audio driver from Realtek contains a vulnerability that enables a local user with low privileges to exploit an improperly validated kernel I/O control interface. By issuing specially crafted property requests, an attacker can gain unauthorized read and write access to kernel memory. This flaw can be exploited for escalating privileges and executing arbitrary kernel-level code, posing significant security risks to affected systems.

References