CVE-2025-5867: RT-Thread lwp_syscall.c csys_sendto null pointer dereference
Published Jun 9, 2025
·Updated
A vulnerability classified as critical was found in RT-Thread 5.1.0. This vulnerability affects the function csyssendto of the file rt-thread/components/lwp/lwpsyscall.c. The manipulation of the argument to leads to null pointer dereference.
Affected Software
2 affected components
RT-Thread RT-Thread
RT-Thread RT-Thread=5.1.0
Event History
Jun 9, 2025
CVE Published
via MITRE·07:31 AM
Data Sourced
via MITRE·07:31 AM
DescriptionSeverityWeakness
Data Sourced
via NVD·08:15 AM
DescriptionSeverityWeaknessAffected Software
Frequently Asked Questions
1
What is the severity of CVE-2025-5867?
CVE-2025-5867 is classified as a critical vulnerability.
2
How does CVE-2025-5867 affect RT-Thread?
CVE-2025-5867 affects the csys_sendto function in the lwp_syscall.c file, leading to a null pointer dereference.
3
What causes the vulnerability CVE-2025-5867 in RT-Thread?
CVE-2025-5867 is caused by improper argument manipulation in the csys_sendto function.
4
Can CVE-2025-5867 be exploited remotely?
Yes, CVE-2025-5867 can potentially be exploited remotely due to its critical nature and issues in the syscall implementation.
5
How can I mitigate the risks associated with CVE-2025-5867?
To mitigate CVE-2025-5867, it's important to update RT-Thread to a patched version that addresses this vulnerability.