CVE-2008-1138: Deslock

Medium severity, CVSS 4.9. EPSS: 0.9% chance of exploitation in the next 30 days.

DLMFENC.sys 1.0.0.26 in DESlock+ 3.2.6 and earlier allows local users to cause a denial of service (system crash) via a certain ZERO_MEM DLMFENC_IOCTL request to \\.\DLKPFSD_Device, aka the "ring0 link list zero" vulnerability.

Affected products

• Deslock Deslock: up to and including 3.2.6

Published 2008-03-04. Last modified 2026-06-16.