Exposure of sensitive system information in the Armoury Crate driver permits a local user to read kernel virtual addresses by sending a forged IOCTL request that bypasses driver verification, thereby exposing kernel memory layout details. This flaw arises from insufficient verification of the IOCTL interface (CWE‑497). The leakage of kernel addresses can aid a local attacker in crafting subsequent attacks such as privilege escalation or kernel exploitation.

The vulnerability affects ASUS Armoury Crate software. The specific impacted component is the Armoury Crate driver running on ASUS devices, as identified by the CNA listing, with no detailed version range provided in the advisory. Administrators should verify if Armoury Crate is installed on their systems.

The CVSS score of 5.7 indicates moderate severity. No EPSS score is available, so the likelihood of exploitation is uncertain but the vulnerability is not listed in the CISA KEV catalog. The attack vector is local, requiring the attacker to run within the user context of the affected system and send a crafted IOCTL request to the driver. Since no remote access is required, the risk is confined to systems where Armoury Crate is installed and the driver is active.