A kernel-level vulnerability in the Redragon Gaming Mouse driver allows local attackers to cause a denial of service, posing a risk to system stability.

This is a kernel-level out-of-bounds write vulnerability (CWE-787) triggered by sending a crafted 2000-byte buffer to the REDRAGON_MOUSE device. The attack requires local access but does not require high privileges to execute the malicious IOCTL request.

A successful exploitation of this vulnerability results in an immediate kernel crash, leading to a denial of service for the affected workstation. Given the CVSS score of 7.5, the risk is high because it allows any local user, including unprivileged ones, to destabilize the operating system. This could disrupt critical business operations and productivity for users relying on these peripherals.

Immediate Action: As no official patch is currently available, administrators should restrict access to the affected driver or uninstall the Redragon software on systems where it is not strictly required for business functions.

Proactive Monitoring: Monitor system event logs for unexpected kernel-mode crashes or recurring bug checks that may indicate exploitation attempts targeting the driver.

Compensating Controls: Implement endpoint security policies that restrict the ability of standard users to load or interact with unsigned or legacy kernel drivers.

Public Exploit Available: Yes, a proof-of-concept Python script is available via Exploit-DB (EDB-ID: 50322) and the Quadron Research Lab GitHub repository.

Due to the lack of an available vendor patch, the primary risk mitigation is the removal or isolation of the vulnerable driver. Organizations should prioritize identifying systems where this driver is installed and apply restrictive access policies to prevent local users from interacting with the driver interface until an official fix is released.