K7 Security Anti-Malware Suite K7RKScan.sys Process Termination Vulnerability via Crafted IOCTL Requests

A denial-of-service vulnerability has been identified in K7RKScan.sys version 23.0.0.10, which is part of the K7 Security Anti-Malware suite. This vulnerability allows an admin-privileged user to send crafted IOCTL requests that terminate processes protected by a third-party implementation. The issue stems from inadequate validation of callers in the driver's IOCTL handler, which permits unauthorized processes to disrupt actions in kernel space. Exploitation of this vulnerability can interfere with essential third-party services or applications, causing a denial-of-service effect.

Impact

Exploitation of this vulnerability can lead to a denial-of-service condition by disrupting critical third-party services or applications.

Remediation

Users are advised to update to K7 Ultimate Security version 17.0.2049 or higher, which includes the patched K7RKScan.sys version 23.0.0.11.