Vulnerability · Published Sep 4, 2026 · Assigned by VulnCheck

CVE-2026-80115PassMark PerformanceTest, BurnInTest, and OSForensics Kernel Crash via DirectIo64.sys MSR Write IOCTL

Medium 6.1

In plain English

A medium-severity security flaw in BurnInTest from PassMark Software. There are no confirmed reports of exploitation so far. The chance it is exploited in the next 30 days is estimated at 0.2% (higher than 4% of all known vulnerabilities).

Severity (CVSS 3.1)6.1Medium

Exploit odds (30 days)0.2%top 95.5% of all CVEs

Exploited in the wildNo reportsCISA SSVC: none

Attack toolingNoneno public tooling known

Official description

PassMark PerformanceTest before 11.1 build 1012, BurnInTest before 11.1 build 1000, and OSForensics before 11.1 build 1016 contain a privilege escalation and denial-of-service vulnerability in DirectIo64.sys that allows local attackers to read arbitrary Model-Specific Registers or write zero to any MSR through exposed IOCTLs with insufficient blocklist enforcement. Attackers can exploit the unrestricted write IOCTL to zero out the system call handler MSR, causing an immediate unrecoverable kernel crash on the next system call, or read security-sensitive MSRs used to locate kernel data structures.

Affected products (as reported)

Vendor	Product	Versions
PassMark Software	PerformanceTest	0 – before 11.1 build 1012
PassMark Software	BurnInTest	0 – before 11.1 build 1000
PassMark Software	OSForensics	0 – before 11.1 build 1016

Weakness: CWE-782 · Vector: CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:H

References

Researcher Disclosure technical-description, exploit
PerformanceTest Changelog release-notes, patch
BurnInTest Changelog release-notes, patch
OSForensics Changelog release-notes, patch
Technical Analysis and Decompiled Evidence technical-description
https://www.vulncheck.com/advisories/passmark-performancetest-burnintest-and-osforensics-kernel-crash-via-directio64-sys-msr-write-ioctl third-party-advisory