Windows Agere Modem Driver Elevation of Privilege

This repository contains a full exploit for a vulnerability (CVE-2025-24990) in the Agere Modem Driver (ltmdm64.sys) on Windows. The exploit leverages insecure IOCTL handling (METHOD_NEITHER) to achieve arbitrary kernel memory read/write, which is then used to modify the Protection Level (PPL) of any process, effectively enabling or disabling process protection. The exploit supports both a 'data-only' technique and a more stable 'ioring' technique for Windows 11 22H2+. The codebase is organized into two main exploit paths: - src_data_only: Implements the exploit using direct IOCTL manipulation and data-only primitives for arbitrary read/write. - src_ioring: Implements the exploit using the ioring kernel feature for more stable arbitrary read/write on newer Windows versions. The main entry points are 'src_data_only/demo.cpp' and 'src_ioring/main.cpp', which take a target PID and desired protection level as arguments. The exploit requires the vulnerable driver to be loaded manually and, on some systems, SeDebugPrivilege to leak kernel addresses. The exploit is operational and provides a reliable local privilege escalation path on affected systems.