CVE-2025-5865: RT-Thread Parameter lwp_syscall.c sys_select memory corruption
A vulnerability was found in RT-Thread 5.1.0. It has been rated as critical. Affected by this issue is the function sysselect of the file rt-thread/components/lwp/lwpsyscall.c of the component Parameter Handler. The manipulation of the argument timeout leads to memory corruption. The vendor explains, that "[t]he timeout parameter should be checked to check if it can be accessed correctly in kernel mode and used temporarily in kernel memory."
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2025-5865?
CVE-2025-5865 has been rated as critical due to its potential for memory corruption.
How do I fix CVE-2025-5865?
To mitigate CVE-2025-5865, it is essential to update to a patched version of RT-Thread that addresses the vulnerability.
What is affected by CVE-2025-5865?
CVE-2025-5865 affects RT-Thread version 5.1.0 specifically in the sys_select function.
What type of vulnerability is CVE-2025-5865?
CVE-2025-5865 is a memory corruption vulnerability resulting from improper handling of the argument timeout.
Who is the vendor for CVE-2025-5865?
The vendor for CVE-2025-5865 is RT-Thread.