CVE-2025-0288: Various Paragon Software products contain an arbitrary kernel memory vulnerability within biontdrv.sys, facili

Routine

HIGH 7.8UPGRADEUPGRADEUPGRADE

CVE-2025-0288 is a high-severity flaw (CVSS 7.8) affecting paragon backup \& recovery, paragon disk wiper, paragon drive copy. Below: why it ranks where it does, which versions are affected, what to do, and the exact commands.

Various Paragon Software products contain an arbitrary kernel memory vulnerability within biontdrv.sys, facilitated by the memmove function, which does not validate or sanitize user controlled input, allowing an attacker the ability to write arbitrary kernel memory and perform privilege escalation.

Why this priority

High severity

A fixed release or distro patch exists.

Risk facts

CVSS score	7.8 (High)
Attack vector	Local
Attack complexity	Low
Privileges needed	Low
User interaction	None
EPSS exploit chance	0.5% (top 57%)
CISA exploited list	No
Published	2025-03-03
Last modified	2026-06-17

Publisher (CNA): CERT/CC · Vendor: paragon-software

Last updated 2026-06-17 · Sources: CVE Program, NVD, CISA KEV, EPSS and vendor advisories · How we score

Am I affected?

Timeline

2025-03-03 17:15 UTCPublished CVE record published
2026-06-17 08:26 UTCUpdated Record last modified

paragon-software paragon backup \& recovery UPGRADE

Affected: >= 15 and <= 17.39

Fixed in: newer than 17.39

Safe to downgrade to: a release before 15

1. Check installed version

apt-cache policy paragon-backup--recovery || rpm -q paragon-backup--recovery || paragon-backup--recovery --version

2. UPGRADE to newer than 17.39 (Debian / Ubuntu)

sudo apt update && sudo apt install --only-upgrade paragon-backup--recovery

2. UPGRADE (RHEL / Amazon Linux / Fedora)

sudo dnf upgrade paragon-backup--recovery

Note

Distros often backport fixes without changing the version number. Confirm with the distro advisory or changelog.

3. If no update is available yet, DOWNGRADE to a release before 15 (Debian / Ubuntu)

apt-cache madison paragon-backup--recovery sudo apt install paragon-backup--recovery=<VERSION_BEFORE_15> sudo apt-mark hold paragon-backup--recovery

3. If no update is available yet, DOWNGRADE (RHEL / Amazon Linux / Fedora)

dnf --showduplicates list paragon-backup--recovery sudo dnf downgrade paragon-backup--recovery-<VERSION_BEFORE_15> sudo dnf versionlock add paragon-backup--recovery

Downgrade risk

Downgrading can break dependent software and may reopen older bugs. Read the distro advisory first and test on a non-production host.

After downgrade

Restart the service, and keep the package held until a fixed release ships.

paragon-software paragon disk wiper UPGRADE

Affected: >= 15 and <= 16

Fixed in: newer than 16

Safe to downgrade to: a release before 15

1. Check installed version

apt-cache policy paragon-disk-wiper || rpm -q paragon-disk-wiper || paragon-disk-wiper --version

2. UPGRADE to newer than 16 (Debian / Ubuntu)

sudo apt update && sudo apt install --only-upgrade paragon-disk-wiper

2. UPGRADE (RHEL / Amazon Linux / Fedora)

sudo dnf upgrade paragon-disk-wiper

Note

Distros often backport fixes without changing the version number. Confirm with the distro advisory or changelog.

3. If no update is available yet, DOWNGRADE to a release before 15 (Debian / Ubuntu)

apt-cache madison paragon-disk-wiper sudo apt install paragon-disk-wiper=<VERSION_BEFORE_15> sudo apt-mark hold paragon-disk-wiper

3. If no update is available yet, DOWNGRADE (RHEL / Amazon Linux / Fedora)

dnf --showduplicates list paragon-disk-wiper sudo dnf downgrade paragon-disk-wiper-<VERSION_BEFORE_15> sudo dnf versionlock add paragon-disk-wiper

Downgrade risk

Downgrading can break dependent software and may reopen older bugs. Read the distro advisory first and test on a non-production host.

After downgrade

Restart the service, and keep the package held until a fixed release ships.

paragon-software paragon drive copy UPGRADE

Affected: >= 15 and <= 16

Fixed in: newer than 16

Safe to downgrade to: a release before 15

1. Check installed version

apt-cache policy paragon-drive-copy || rpm -q paragon-drive-copy || paragon-drive-copy --version

2. UPGRADE to newer than 16 (Debian / Ubuntu)

sudo apt update && sudo apt install --only-upgrade paragon-drive-copy

2. UPGRADE (RHEL / Amazon Linux / Fedora)

sudo dnf upgrade paragon-drive-copy

Note

Distros often backport fixes without changing the version number. Confirm with the distro advisory or changelog.

3. If no update is available yet, DOWNGRADE to a release before 15 (Debian / Ubuntu)

apt-cache madison paragon-drive-copy sudo apt install paragon-drive-copy=<VERSION_BEFORE_15> sudo apt-mark hold paragon-drive-copy

3. If no update is available yet, DOWNGRADE (RHEL / Amazon Linux / Fedora)

dnf --showduplicates list paragon-drive-copy sudo dnf downgrade paragon-drive-copy-<VERSION_BEFORE_15> sudo dnf versionlock add paragon-drive-copy

Downgrade risk

Downgrading can break dependent software and may reopen older bugs. Read the distro advisory first and test on a non-production host.

After downgrade

Restart the service, and keep the package held until a fixed release ships.

paragon-software paragon hard disk manager UPGRADE

Affected: >= 15 and <= 17.39

Fixed in: newer than 17.39

Safe to downgrade to: a release before 15

1. Check installed version

apt-cache policy paragon-hard-disk-manager || rpm -q paragon-hard-disk-manager || paragon-hard-disk-manager --version

2. UPGRADE to newer than 17.39 (Debian / Ubuntu)

sudo apt update && sudo apt install --only-upgrade paragon-hard-disk-manager

2. UPGRADE (RHEL / Amazon Linux / Fedora)

sudo dnf upgrade paragon-hard-disk-manager

Note

Distros often backport fixes without changing the version number. Confirm with the distro advisory or changelog.

3. If no update is available yet, DOWNGRADE to a release before 15 (Debian / Ubuntu)

apt-cache madison paragon-hard-disk-manager sudo apt install paragon-hard-disk-manager=<VERSION_BEFORE_15> sudo apt-mark hold paragon-hard-disk-manager

3. If no update is available yet, DOWNGRADE (RHEL / Amazon Linux / Fedora)

dnf --showduplicates list paragon-hard-disk-manager sudo dnf downgrade paragon-hard-disk-manager-<VERSION_BEFORE_15> sudo dnf versionlock add paragon-hard-disk-manager

Downgrade risk

Downgrading can break dependent software and may reopen older bugs. Read the distro advisory first and test on a non-production host.

After downgrade

Restart the service, and keep the package held until a fixed release ships.

paragon-software paragon migrate os to ssd UPGRADE

Affected: >= 4 and <= 5

Fixed in: newer than 5

Safe to downgrade to: a release before 4

1. Check installed version

apt-cache policy paragon-migrate-os-to-ssd || rpm -q paragon-migrate-os-to-ssd || paragon-migrate-os-to-ssd --version

2. UPGRADE to newer than 5 (Debian / Ubuntu)

sudo apt update && sudo apt install --only-upgrade paragon-migrate-os-to-ssd

2. UPGRADE (RHEL / Amazon Linux / Fedora)

sudo dnf upgrade paragon-migrate-os-to-ssd

Note

Distros often backport fixes without changing the version number. Confirm with the distro advisory or changelog.

3. If no update is available yet, DOWNGRADE to a release before 4 (Debian / Ubuntu)

apt-cache madison paragon-migrate-os-to-ssd sudo apt install paragon-migrate-os-to-ssd=<VERSION_BEFORE_4> sudo apt-mark hold paragon-migrate-os-to-ssd

3. If no update is available yet, DOWNGRADE (RHEL / Amazon Linux / Fedora)

dnf --showduplicates list paragon-migrate-os-to-ssd sudo dnf downgrade paragon-migrate-os-to-ssd-<VERSION_BEFORE_4> sudo dnf versionlock add paragon-migrate-os-to-ssd

Downgrade risk

Downgrading can break dependent software and may reopen older bugs. Read the distro advisory first and test on a non-production host.

After downgrade

Restart the service, and keep the package held until a fixed release ships.

paragon-software paragon partition manager UPGRADE

Affected: >= 15 and <= 17.39

Fixed in: newer than 17.39

Safe to downgrade to: a release before 15

1. Check installed version

apt-cache policy paragon-partition-manager || rpm -q paragon-partition-manager || paragon-partition-manager --version

2. UPGRADE to newer than 17.39 (Debian / Ubuntu)

sudo apt update && sudo apt install --only-upgrade paragon-partition-manager

2. UPGRADE (RHEL / Amazon Linux / Fedora)

sudo dnf upgrade paragon-partition-manager

Note

Distros often backport fixes without changing the version number. Confirm with the distro advisory or changelog.

3. If no update is available yet, DOWNGRADE to a release before 15 (Debian / Ubuntu)

apt-cache madison paragon-partition-manager sudo apt install paragon-partition-manager=<VERSION_BEFORE_15> sudo apt-mark hold paragon-partition-manager

3. If no update is available yet, DOWNGRADE (RHEL / Amazon Linux / Fedora)

dnf --showduplicates list paragon-partition-manager sudo dnf downgrade paragon-partition-manager-<VERSION_BEFORE_15> sudo dnf versionlock add paragon-partition-manager

Downgrade risk

Downgrading can break dependent software and may reopen older bugs. Read the distro advisory first and test on a non-production host.

After downgrade

Restart the service, and keep the package held until a fixed release ships.

Verify at the official source NVD · CVE Program · Report a problem with this page
Scores and fixes here are computed automatically from those and other public sources. Confirm with the vendor advisory before changing production systems.

Quick answers

How do I fix CVE-2025-0288?

paragon backup \& recovery: upgrade to newer than 17.39; paragon disk wiper: upgrade to newer than 16; paragon drive copy: upgrade to newer than 16. Exact commands for each OS are on this page.

Is CVE-2025-0288 being exploited?

CVE-2025-0288 is not on the CISA Known Exploited Vulnerabilities list at the time of the last update. Check again, as this can change.

What does CVE-2025-0288 affect?

CVE-2025-0288 affects paragon backup \& recovery, paragon disk wiper, paragon drive copy. Severity is high (CVSS 7.8). Various Paragon Software products contain an arbitrary kernel memory vulnerability within biontdrv.sys, facilitated by the memmove function, which does not validate or sanitize user controlled input, allowing an attacker the ability to writ

How urgent is CVE-2025-0288?

Priority 38/100. High severity

Related CVEs

CVE-2025-0289 HIGH 7.8 UPGRADE UPGRADE Various Paragon Software products contain an insecure kernel resource access vulnerability facilitated by the
CVE-2025-0287 MEDIUM 5.1 UPGRADE UPGRADE Various Paragon Software products contain a null pointer dereference vulnerability within biontdrv.sys that is
CVE-2025-0286 HIGH 8.4 UPGRADE UPGRADE Various Paragon Software products contain an arbitrary kernel memory write vulnerability within biontdrv.sys t
CVE-2025-0285 HIGH 7.8 UPGRADE UPGRADE Various Paragon Software products contain an arbitrary kernel memory mapping vulnerability within biontdrv.sys

References

← Back to latest CVEs