CVE-2026-8050

{"dataType": "CVE_RECORD", "dataVersion": "5.2", "cveMetadata": {"cveId": "CVE-2026-8050", "assignerOrgId": "37e5125f-f79b-445b-8fad-9564f167944b", "state": "PUBLISHED", "assignerShortName": "certcc", "dateReserved": "2026-05-06T17:40:15.269Z", "datePublished": "2026-06-17T21:05:32.448Z", "dateUpdated": "2026-06-18T13:14:31.644Z"}, "containers": {"cna": {"title": "CVE-2026-8050", "descriptions": [{"lang": "en", "value": "In SignalRGB versions prior to 1.3.7.0, seven of the thirteen IOCTL handlers dereference the SystemBuffer pointer without first verifying that it is non-NULL. Sending an IOCTL with an empty input buffer causes a NULL pointer dereference, resulting in a kernel crash."}], "source": {"discovery": "UNKNOWN"}, "affected": [{"vendor": "SignalRGB", "product": "SignalRGB kernel driver", "versions": [{"status": "affected", "version": "0", "lessThan": "1.3.7.0", "versionType": "custom"}]}], "problemTypes": [{"descriptions": [{"lang": "en", "description": "CWE-476 NULL Pointer Dereference"}]}], "references": [{"url": "https://kb.cert.org/vuls/id/380058"}], "x_generator": {"engine": "VINCE 3.0.42", "env": "prod", "origin": "https://cveawg.mitre.org/api/cve/CVE-2026-8050"}, "providerMetadata": {"orgId": "37e5125f-f79b-445b-8fad-9564f167944b", "shortName": "certcc", "dateUpdated": "2026-06-17T21:05:32.448Z"}}, "adp": [{"metrics": [{"cvssV3_1": {"scope": "UNCHANGED", "version": "3.1", "baseScore": 7.5, "attackVector": "NETWORK", "baseSeverity": "HIGH", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H", "integrityImpact": "NONE", "userInteraction": "NONE", "attackComplexity": "LOW", "availabilityImpact": "HIGH", "privilegesRequired": "NONE", "confidentialityImpact": "NONE"}}, {"other": {"type": "ssvc", "content": {"timestamp": "2026-06-18T13:14:27.020614Z", "id": "CVE-2026-8050", "options": [{"Exploitation": "none"}, {"Automatable": "yes"}, {"Technical Impact": "partial"}], "role": "CISA Coordinator", "version": "2.0.3"}}}], "title": "CISA ADP Vulnrichment", "providerMetadata": {"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "shortName": "CISA-ADP", "dateUpdated": "2026-06-18T13:14:31.644Z"}}]}}

{"dataType": "CVE_RECORD", "containers": {"adp": [{"title": "CISA ADP Vulnrichment", "metrics": [{"cvssV3_1": {"scope": "UNCHANGED", "version": "3.1", "baseScore": 7.5, "attackVector": "NETWORK", "baseSeverity": "HIGH", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H", "integrityImpact": "NONE", "userInteraction": "NONE", "attackComplexity": "LOW", "availabilityImpact": "HIGH", "privilegesRequired": "NONE", "confidentialityImpact": "NONE"}}, {"other": {"type": "ssvc", "content": {"id": "CVE-2026-8050", "role": "CISA Coordinator", "options": [{"Exploitation": "none"}, {"Automatable": "yes"}, {"Technical Impact": "partial"}], "version": "2.0.3", "timestamp": "2026-06-18T13:14:27.020614Z"}}}], "providerMetadata": {"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "shortName": "CISA-ADP", "dateUpdated": "2026-06-18T13:14:15.842Z"}}], "cna": {"title": "CVE-2026-8050", "source": {"discovery": "UNKNOWN"}, "affected": [{"vendor": "SignalRGB", "product": "SignalRGB kernel driver", "versions": [{"status": "affected", "version": "0", "lessThan": "1.3.7.0", "versionType": "custom"}]}], "references": [{"url": "https://kb.cert.org/vuls/id/380058"}], "x_generator": {"env": "prod", "engine": "VINCE 3.0.42", "origin": "https://cveawg.mitre.org/api/cve/CVE-2026-8050"}, "descriptions": [{"lang": "en", "value": "In SignalRGB versions prior to 1.3.7.0, seven of the thirteen IOCTL handlers dereference the SystemBuffer pointer without first verifying that it is non-NULL. Sending an IOCTL with an empty input buffer causes a NULL pointer dereference, resulting in a kernel crash."}], "problemTypes": [{"descriptions": [{"lang": "en", "description": "CWE-476 NULL Pointer Dereference"}]}], "providerMetadata": {"orgId": "37e5125f-f79b-445b-8fad-9564f167944b", "shortName": "certcc", "dateUpdated": "2026-06-17T21:05:32.448Z"}}}, "cveMetadata": {"cveId": "CVE-2026-8050", "state": "PUBLISHED", "dateUpdated": "2026-06-18T13:14:31.644Z", "dateReserved": "2026-05-06T17:40:15.269Z", "assignerOrgId": "37e5125f-f79b-445b-8fad-9564f167944b", "datePublished": "2026-06-17T21:05:32.448Z", "assignerShortName": "certcc"}, "dataVersion": "5.2"}

{"affected": [{"affectedData": [{"product": "SignalRGB kernel driver", "vendor": "SignalRGB", "versions": [{"lessThan": "1.3.7.0", "status": "affected", "version": "0", "versionType": "custom"}]}], "source": "cret@cert.org"}], "cveTags": [], "descriptions": [{"lang": "en", "value": "In SignalRGB versions prior to 1.3.7.0, seven of the thirteen IOCTL handlers dereference the SystemBuffer pointer without first verifying that it is non-NULL. Sending an IOCTL with an empty input buffer causes a NULL pointer dereference, resulting in a kernel crash."}, {"lang": "es", "value": "En versiones de SignalRGB anteriores a la 1.3.7.0, siete de los trece manejadores de IOCTL desreferencian el puntero SystemBuffer sin verificar primero que no sea NULL. El env\u00edo de un IOCTL con un b\u00fafer de entrada vac\u00edo provoca una desreferencia de puntero NULL, lo que resulta en un fallo del kernel."}], "id": "CVE-2026-8050", "lastModified": "2026-10-26T11:10:00.157", "metrics": {"cvssMetricV31": [{"cvssData": {"attackComplexity": "LOW", "attackVector": "NETWORK", "availabilityImpact": "HIGH", "baseScore": 7.5, "baseSeverity": "HIGH", "confidentialityImpact": "NONE", "integrityImpact": "NONE", "privilegesRequired": "NONE", "scope": "UNCHANGED", "userInteraction": "NONE", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H", "version": "3.1"}, "exploitabilityScore": 3.9, "impactScore": 3.6, "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "type": "Secondary"}], "ssvcV203": [{"source": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "ssvcData": {"id": "CVE-2026-8050", "options": [{"exploitation": "none"}, {"automatable": "yes"}, {"technicalImpact": "partial"}], "role": "CISA Coordinator", "timestamp": "2026-06-18T13:14:27.020614Z", "version": "2.0.3"}}]}, "published": "2026-06-17T22:16:25.330", "references": [{"source": "cret@cert.org", "url": "https://kb.cert.org/vuls/id/380058"}], "sourceIdentifier": "cret@cert.org", "vulnStatus": "Deferred"}

{}

{"affected": [{"configurations": [{"platform": null, "status": "affected", "versions": {"scheme": "generic", "value": "[0,1.3.7.0)"}}], "enrichment": {"confidence": 100.0, "confidence_source": "cna", "scores": [{"score": 100.0, "source": "cna"}]}, "original": {"product": "SignalRGB kernel driver", "source": "cna", "vendor": "SignalRGB"}, "product": "signalrgb_kernel_driver", "vendor": "signalrgb"}], "created": "2026-06-18T20:30:05.279015+00:00", "title": "Null Pointer Dereference in SignalRGB Kernel Driver Leading to Kernel Crash", "updated": "2026-06-20T22:56:57.924036+00:00", "vendors": ["signalrgb", "signalrgb$PRODUCT$signalrgb_kernel_driver"], "weaknesses": ["CWE-476"]}