5.1
Medium
CVE-2026-84290 IBM Guardium Data Protection 12.0, 12.1, 12.2 is affected by an improper validation of user-supplied pointers in the…
Description
IBM Guardium Data Protection 12.0, 12.1, 12.2 is affected by an improper validation of user-supplied pointers in the WfpMonitor kernel driver. Certain METHOD_NEITHER IOCTL handlers dereference user-controlled pointers without adequate probing and exception handling, potentially allowing a privileged local attacker to cause a system crash or perform limited kernel-memory reads.
Affected products and versions
| Product | Affected versions | Fixed in |
|---|---|---|
| Guardium Data Protection | 12.2 | No fix stated |
| Guardium Data Protection | 12.1 | No fix stated |
| Guardium Data Protection | 12.0 | No fix stated |
Other CVEs of Guardium Data Protection
The 97 CVEs of Guardium Data Protection →
CVE-2026-84237
IBM Guardium Data Protection is affected by multiple vulnerabilities
3.1
Low
CVE-2026-84229
IBM Guardium Data Protection is affected by multiple vulnerabilities
6.5
Medium
CVE-2026-84228
IBM Guardium Data Protection is affected by multiple vulnerabilities
3.1
Low
CVE-2026-84030
IBM Guardium Data Protection is affected by multiple vulnerabilities
5.6
Medium