Is CVE-2026-84290 being exploited?

No public exploit is currently tracked.

How severe is CVE-2026-84290?

CVE-2026-84290 has a CVSS v3 severity of MEDIUM (5.1).

Back

CVE-2026-84290

Description

IBM Guardium Data Protection 12.0, 12.1, 12.2 is affected by an improper validation of user-supplied pointers in the WfpMonitor kernel driver. Certain METHOD_NEITHER IOCTL handlers dereference user-controlled pointers without adequate probing and exception handling, potentially allowing a privileged local attacker to cause a system crash or perform limited kernel-memory reads.