ASUS bsitf.sys (CVE-2026-13585): Arbitrary Physical Memory Mapping in ASUS Business/Software Manager kernel driver

<p>Posted by Hayaturehman Ahmadzai on Jul 20</p>Hi all,<br /> <br /> I&apos;m disclosing a vulnerability (CVE-2026-13585) in the ASUS bsitf.sys /<br /> AsusBSItf.sys kernel driver, shipped with ASUS Business Manager and<br /> Software Manager. ASUS has assigned the CVE and published a vendor advisory<br /> with countermeasures.<br /> <br /> Summary: The driver exposes a device (\\.\bsitf, admin-re