AI-generated editorial illustration; not a documentary photograph.
Gigabyte has released mitigations for vulnerabilities in two Gigabyte Control Center (GCC) kernel drivers that could allow an authenticated local attacker to gain Ring 0 privileges and potentially take complete control of a PC. PC Gamer reported the disclosure on September 22, 2026, and said patched GCC versions are already available.
Vulnerable Driver Interfaces
The affected components are GVCIDrv64.sys and gdrv3.sys, both included with GCC, software commonly used alongside Gigabyte motherboards. According to Gigabyte's disclosure, insufficient access controls and inadequate input validation in the drivers' IOCTL interfaces allowed unauthorized hardware operations.
A malicious user could submit a specially crafted IOCTL request to map physical memory or access hardware directly, bypassing memory protections and escalating privileges to the kernel. Successful exploitation could provide NT AUTHORITY\SYSTEM access. The described attack requires an authenticated actor with local access; the source does not identify it as a remote, unauthenticated compromise.
Versions With the Fix
Gigabyte says the mitigation is included in GCC 26.08.28.01, GBT_VGA_26.08.24.01 and later releases. PC Gamer identified 26.09.10.01 as the current GCC version at the time of its report. Users running GCC on systems with Gigabyte hardware should compare their installed version against those thresholds and update where necessary.
Controls Added to the Drivers
The mitigation restricts driver device objects to authorized system accounts, removes high-risk interfaces that enabled direct physical-memory mapping, and requires appropriate administrative privileges for hardware-access functions. Gigabyte also added stricter validation for IOCTL parameters to prevent access to restricted hardware registers and configuration spaces.
Gigabyte credited security researchers Mohamed Alzhrani, also known as 0xMaz, and Subhan Sultanov, also known as me1n, with finding the vulnerabilities and assisting the patching process. The report does not specify whether the flaws were exploited before the fixes became available.
Source: Gigabyte admits an oopsie with Gigabyte Control Center software leaving kernel exposed to attackers
SIGNAL TITANS
Leave a Reply