Gigabyte has fixed a dangerous Control Center driver vulnerability

Gigabyte has published a new security notice for Gigabyte Control Center.The problem affects the kernel level driver: under certain conditions, a local attacker could gain arbitrary access to physical memory and I/O ports, that is, go far beyond the normal rights of the user application.

At the time of publication, the individual CVE number for the new entry is still in Pending status.In the official Gigabyte list, the vulnerability is designated as “Arbitrary Physical Memory and I/O Port Access Vulnerability in GIGABYTE Control Center Kernel Driver” and is dated September 21, 2026.

Why is a driver vulnerability especially annoying?

Control Center is used to manage motherboard settings, cooling, lighting and other functions.For some operations, the program installs drivers with Windows kernel privileges.A bug at this level potentially allows malicious code to bypass normal boundaries between the application and the operating system.

This is not the first time GCC has had problems in 2026.Gigabyte previously closed CVE-2026-9492 in the MyPortIO driver, where an authenticated local user could read and modify physical memory and gain kernel privileges.Also in the spring, the vulnerabilities of writing arbitrary files and unsafe deserialization were fixed.

What should owners of Gigabyte motherboards do?

If Gigabyte Control Center is installed, it is safest to update it through the official Gigabyte mechanism and do not delay restarting the system after updating driver components.You should not replace individual SYS files yourself: the application uses several related modules, and manual replacement may leave the old vulnerable part.

At the same time, it makes sense to check whether GCC is needed at all on a particular system.If the program is used only for rare backlight adjustments, the constant operation of a set of background services may be unnecessary.In other hardware materials we recently examined new Steam Frame and its starting price - there the situation is the opposite: most of the system functions are collected around one controlled platform.