CVE-2026-36355
HighCVSS 7.7Exploitation Probability (EPSS)
Low risk47th percentile - higher than 47% of all known CVEs
Summary
The rtl8192cd Wi-Fi kernel driver in the Realtek rtl819x Jungle SDK (all known versions through v3.4.14B) does not perform any access control checks on the write_mem (ioctl 0x89F5) and read_mem (ioctl 0x89F6) debug handlers, which are compiled into production builds via the unconditionally defined _IOCTL_DEBUG_CMD_ macro in 8192cd_cfg.h.
Risk Assessment
An attacker can read and write arbitrary kernel memory through the Wi-Fi driver interface, leading to complete compromise of system confidentiality, integrity, and availability.
Recommendation
Immediately disable or remove the _IOCTL_DEBUG_CMD_ macro from 8192cd_cfg.h in production builds and apply a vendor patch as soon as it becomes available.
Other vulnerabilities in Realtek rtl819x Jungle SDK
Original NVD description (English source)
The rtl8192cd Wi-Fi kernel driver in the Realtek rtl819x Jungle SDK (all known versions through v3.4.14B) does not perform any access control checks on the write_mem (ioctl 0x89F5) and read_mem (ioctl 0x89F6) debug handlers, which are compiled into production builds via the unconditionally defined _IOCTL_DEBUG_CMD_ macro in 8192cd_cfg.h
Vulnerability data from NVD (NIST) · CISA KEV · EPSS