Lenovo-CVE-2025-8061

CVE-2025-8061 is a privilege escalation vulnerability in Lenovo's LnvMSRIO.sys driver. The driver exposes IOCTL handlers that allow any user-mode process (including unprivileged users) to:

Read/write arbitrary Model-Specific Registers (MSRs)

Read/write arbitrary physical memory

This gives a standard user full kernel read/write capabilities, leading to:

KASLR bypass (via IA32_LSTAR)

Direct kernel code execution (via IA32_LSTAR hijacking)

And so on:3