CVE-2026-8035
Analyzed Analyzed - Analysis Complete
Improper Input Validation in NI-PAL Kernel Driver Leads to DoS

Publication date: 2026-06-02

Last updated on: 2026-06-05

Assigner: National Instruments

Description
Improper input validation in the NI-PAL kernel driver may allow a local authenticated user to cause a denial of service by triggering a crash due to a NULL pointer dereference. This vulnerability affects NI-PAL 26.3.0 and prior versions on Windows and Linux.
CVSS Scores
EPSS Scores
Probability:
Percentile:
Meta Information
Published
2026-06-02
Last Modified
2026-06-05
Generated
2026-06-23
AI Q&A
2026-06-02
EPSS Evaluated
2026-06-21
NVD
CVE-2026-8035
EUVD
EUVD-2026-33991
Affected Vendors & Products
Showing 1 associated CPE
Vendor Product Version / Range
ni ni-pal to 26.3.0 (inc)
Helpful Resources
Exploitability
CWE
CWE Icon
KEV
KEV Icon
CWE ID Description
CWE-476 The product dereferences a pointer that it expects to be valid but is NULL.
Attack-Flow Graph
AI Quick Actions
Instant insights powered by AI
Executive Summary

CVE-2026-8035 is a vulnerability in the NI-PAL kernel driver versions 26.3.0 and earlier on Windows, Linux, and Linux Real-Time systems. It is caused by improper input validation that allows a local authenticated user to trigger a crash by causing a NULL pointer dereference.

This means that an attacker with local access and valid credentials can cause the affected system to become unstable or stop functioning properly by exploiting this flaw.

Impact Analysis

The primary impact of this vulnerability is a denial of service (DoS). A local authenticated user can exploit the improper input validation to crash the NI-PAL kernel driver, causing the system or affected software to stop working.

This can lead to system instability, interruption of services, and potential downtime, affecting productivity and reliability of systems using the vulnerable NI-PAL software.

Mitigation Strategies

To mitigate CVE-2026-8035, it is strongly recommended to upgrade the affected NI-PAL software to a fixed version.

  • For Windows systems, install NI-VISA 2026 Q2 Patch 1 (version 26.3.1) or later via NI Package Manager, Software Downloads, or NI Update Service.
  • For Linux Desktop users, upgrade to NI Linux Device Drivers 2026 Q2 or later.
  • For Linux Real-Time users, install NI Linux RT System Image 2026 Q2 or later.
Compliance Impact

The provided information does not specify any direct impact of this vulnerability on compliance with common standards and regulations such as GDPR or HIPAA.

Chat Assistant
Ask questions about this CVE
Hi! I’m here to help you understand CVE-2026-8035. Ask me anything about the vulnerability, its impact, or mitigation strategies.
0/70
EPSS Chart