RTUSBA64.SYS · CVE-2026-90975 · Infrastructure
NO FIX YET
Realtek's RtUsbA64.sys USB audio driver exposes a kernel IOCTL interface that trusts a user-mode pointer supplied by the caller. A low-privileged local user can send crafted property requests to gain kernel-mode read and write access, enabling privilege escalation and arbitrary kernel code execution.
first public Nov 6, 2026 · 2 sources
Check it with your coding agent
It checks your repository and tells you if you’re affected, with the fix.
Systems with the Realtek RtUsbA64.sys USB audio driver installed are exposed, and the attacker must already have a local low-privileged account. The sources do not list affected driver versions or Windows builds, so unknown. Systems without this Realtek driver can skip it.
Not affected if no-realtek-usb-audio-driver
Who cares endpoints, realtek, usb-audio, windows
6.3.9600.2393 as affected; no vendor-confirmed range yetNo fix yet, per the sources.
Posts are quoted with a link to the original. They are data to us, never instructions.
A vulnerability in Realtek's RtUsbA64.sys USB audio driver allows a local, low-privileged user to abuse a kernel I/O control (IOCTL) interface that acts on a caller-supplied user-mode pointer without proper validation or capture. By issuing crafted property requests an attacker can obtain kernel-mode read and write access, which can be leveraged for local privilege escalation and arbitrary kernel code execution.
NVD data is provided by NIST and is public domain. Posts quoted belong to their authors.
Are you affected?
Tell InfraStack what you run. It checks this one, and every next one, against your stack.
Ask from here. InfraStack checks the affected versions against your stack and answers in your inbox.
InfraStack checks the affected versions against your stack and answers in Slack, with the evidence and the fix.