Posted by Hayaturehman Ahmadzai on Jul 20Hi all, I'm disclosing a vulnerability (CVE-2026-13585) in the ASUS bsitf.sys / AsusBSItf.sys kernel driver, shipped with ASUS Business Manager and Software Manager. ASUS has assigned the CVE and published a vendor advisory with countermeasures. Summary: The driver exposes a device (\.\bsitf, admin-required to open) with an IOCTL that allocates a caller-specified amount of physically contiguous kernel memory, maps it into the calling...