Security Advisory
CVE-2025-1865
CVE vulnerability detail — eXtreme Datacenter Security Operations
Description
The kernel driver, accessible to low-privileged users, exposes a function that fails to properly validate the privileges of the calling process. This allows creating files at arbitrary locations with full user control, ultimately allowing for privilege escalation to SYSTEM.