A local privilege escalation vulnerability in NovumOS allows user-mode processes to overwrite critical kernel structures, leading to full system compromise.

The vulnerability exists in the MemoryMapRange (Syscall 15) implementation, which fails to validate memory mapping requests against restricted kernel address spaces. A local attacker can map sensitive structures like the IDT, GDT, or TSS into user space, allowing for unauthorized modification of kernel interrupt handlers.

With a CVSS score of 9.0, this vulnerability allows a local, unprivileged attacker to elevate to kernel-level privileges. This effectively bypasses all system security boundaries, enabling the attacker to install rootkits, steal sensitive kernel-mode data, or disable security auditing mechanisms, resulting in a total loss of system integrity.

Immediate Action: Update NovumOS to version 0.24 or later to implement proper memory range validation within the Syscall 15 interface.

Proactive Monitoring: Monitor system logs for unusual kernel-mode activity or unexpected modifications to system interrupt handlers that could indicate exploitation of memory mapping.

Compensating Controls: Restrict local access to systems running NovumOS to trusted users only, as the vulnerability requires local execution to trigger the privilege escalation.

Public Exploit Available: False

The ability to escalate privileges to the kernel level makes this an extremely dangerous vulnerability. Organizations relying on NovumOS must update to version 0.24 immediately to patch the memory mapping flaw and prevent local attackers from gaining full control of the operating system.