CVE-2026-40572 NovumOS has Arbitrary Memory Mapping via Syscall 15 (MemoryMapRange)

Critical 9.0 Published 18 Apr 2026 Updated 20 Apr 2026

A local attacker can escalate privileges to kernel context by mapping arbitrary memory ranges via Syscall 15 in NovumOS.

Exploited in the wild: Not known
Login needed: Not needed
Attackable: Local or same network only
Victim action needed: Not needed
Fix: None listed

What is CVE-2026-40572?

CVE-2026-40572 is a critical vulnerability in MinecAnton209 NovumOS, published on 18 Apr 2026. It can only be exploited from the same machine or local network, with no action from the victim.

Official description

NovumOS is a custom 32-bit operating system written in Zig and x86 Assembly. In versions prior to 0.24, Syscall 15 (MemoryMapRange) allows Ring 3 user-mode processes to map arbitrary virtual address ranges into their address space without validating against forbidden regions, including critical kernel structures such as the IDT, GDT, TSS, and page tables. A local attacker can exploit this to modify kernel interrupt handlers, resulting in privilege escalation from user mode to kernel context. This issue has been fixed in version 0.24.

Weakness: CWE-269

Which versions are affected by CVE-2026-40572?

It affects 1 product.

Products include Minecanton209 Novumos.

How do I fix CVE-2026-40572?

No fix has been published for CVE-2026-40572 yet. Limit exposure of the affected software until one is available.

Is CVE-2026-40572 being exploited?

It is not confirmed as exploited in the wild, but public exploit code for CVE-2026-40572 exists.

CVE-2026-40317 NovumOS has Privilege Escalation in the Syscall Interface Critical 9.4

Sources

Also known as GHSA-rg7m-6vh7-f4v2.