atillk64.sys

ASRock low-level hardware driver

From ASRock

Part of the ASRock family

Status

On a known-vulnerable list

Known variants

3 distinct hashes

Public CVEs

Field notes

ATILLK64.sys is a kernel driver used by ASRock's RGB LED, A-Tuning, F-Stream, and related motherboard utilities to program and query the embedded integrated circuits on ASRock hardware. It is on the LOLDrivers list as part of a 2018 cluster of ASRock driver vulnerabilities (CVE-2018-10709 through CVE-2018-10712) that exposed IOCTLs with insufficient access control, allowing local privilege escalation.

It is common on systems with ASRock motherboards running ASRock software. Updating ASRock's current utilities is the practical step.

What the record shows

atillk64.sys is listed as a known-vulnerable driver on the public LOLDrivers project. 3 distinct binary hashes matching this filename are on record, meaning multiple versions of the file have been observed.

Public CVEs

CVE-2018-10709 CVE-2018-10710 CVE-2018-10711 CVE-2018-10712

What this means, plainly

Presence is not proof of misuse. Driver files on the LOLDrivers list commonly ship with legitimate hardware tools, gaming software, or vendor utilities. Their presence is recorded as evidence on a record. It is never treated as a verdict about a person.

Related drivers

Other drivers in the ASRock family. See the whole family →

asrdrv10.sys asrdrv101.sys asrdrv102.sys asrdrv103.sys asrdrv104.sys asrdrv106.sys

Source

Status data comes from the public LOLDrivers project, a community-curated registry of drivers known to be vulnerable or malicious. The snapshot Vera uses was refreshed July 10, 2026. CVE links go to the NIST National Vulnerability Database.

In plain words

Kernel driver BYOVD Ring 0 Code-signing certificate Certificate revocation The full glossary →

Cite this entry

Vera Project. “atillk64.sys.” Vera Field Guide (Driver). The Vera Project. https://www.veraproject.xyz/field-guide/drivers/atillk64-sys