CVE-2025-1115: RT-Thread lwp_syscall.c sys_timer_settime information disclosure
A vulnerability classified as problematic was found in RT-Thread up to 5.1.0. Affected by this vulnerability is the function sysdeviceclose/sysdevicecontrol/sysdevicefind/sysdeviceinit/sysdeviceopen/sysdeviceread/sysdeviceregister/sysdevicewrite/syseventdelete/syseventrecv/syseventsend/sysmbdelete/sysmbrecv/sysmbsend/sysmbsendwait/sysmqrecv/sysmqsend/sysmqurgent/sysmutexdelete/sysmutexrelease/sysmutextake/sysrttimercontrol/sysrttimerdelete/sysrttimerstart/sysrttimerstop/syssemdelete/syssemrelease/syssemtake/sysshmat/sysshmdt/systhreadcreate/systhreaddelete/systhreadstartup/systimerdelete/systimergettime/systimersettime of the file rt-thread/components/lwp/lwpsyscall.c. The manipulation of the argument arg[0] leads to information disclosure. An attack has to be approached locally.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2025-1115?
CVE-2025-1115 is classified as a problematic vulnerability due to its potential for information disclosure.
How do I fix CVE-2025-1115?
To fix CVE-2025-1115, update RT-Thread to a version higher than 5.1.0.
What components are affected by CVE-2025-1115?
CVE-2025-1115 affects the sys_thread_create function in the lwp_syscall.c file of RT-Thread.
What type of vulnerability is CVE-2025-1115?
CVE-2025-1115 is an information disclosure vulnerability.
Can CVE-2025-1115 be exploited remotely?
The specific exploitability of CVE-2025-1115 is not detailed, but it requires manipulation of the argument arg[0] to disclose information.