Local privilege escalation via unrestricted MSR IOCTLs

Improper access control in Awesome Miner 11.2.4 and earlier allows local users to execute code in the Windows kernel through driver IOCTLs. The IntelliBreeze.Maintenance.Service.sys IOCTL handler accepts attacker-controlled MSR identifiers and values without restricting callable registers or enforcing a secure device DACL. A low-privileged local account can open the driver when it is loaded outside Awesome Miner, enabling SYSTEM privilege escalation; the published proof of concept instead corrupts LSTAR and crashes Windows.