alsysio64.sys

Core Temp kernel driver

From Arthur Liberman (Alcpu)

Status

On a known-vulnerable list

Known variants

4 distinct hashes

Field notes

ALSysIO64.sys (Arthur Liberman System Input Output, 64-bit) is the kernel helper used by Core Temp, a small free CPU-temperature-monitoring utility that has been a staple of PC builders for years. The driver is what lets Core Temp read CPU temperature sensors and other processor data that user-mode APIs do not expose.

It is on the LOLDrivers list because the driver's IOCTL surface provides primitives useful for kernel-level privilege escalation. Older signed builds remain loadable on modern Windows.

If this driver is on your system, the simplest explanation is Core Temp. Update Core Temp to the current release.

What the record shows

alsysio64.sys is listed as a known-vulnerable driver on the public LOLDrivers project. 4 distinct binary hashes matching this filename are on record, meaning multiple versions of the file have been observed.

What this means, plainly

Presence is not proof of misuse. Driver files on the LOLDrivers list commonly ship with legitimate hardware tools, gaming software, or vendor utilities. Their presence is recorded as evidence on a record. It is never treated as a verdict about a person.

Source

Status data comes from the public LOLDrivers project, a community-curated registry of drivers known to be vulnerable or malicious. The snapshot Vera uses was refreshed July 10, 2026. CVE links go to the NIST National Vulnerability Database.

In plain words

Kernel driver BYOVD Ring 0 Code-signing certificate Certificate revocation The full glossary →

Cite this entry

Vera Project. “alsysio64.sys.” Vera Field Guide (Driver). The Vera Project. https://www.veraproject.xyz/field-guide/drivers/alsysio64-sys