CVE-2025-5868: RT-Thread lwp_syscall.c sys_thread_sigprocmask array index
Published Jun 9, 2025
·Updated
A vulnerability, which was classified as critical, has been found in RT-Thread 5.1.0. This issue affects the function systhreadsigprocmask of the file rt-thread/components/lwp/lwpsyscall.c. The manipulation of the argument how leads to improper validation of array index.
Affected Software
2 affected components
RT-Thread RT-Thread
RT-Thread RT-Thread=5.1.0
Event History
Jun 9, 2025
CVE Published
via MITRE·08:00 AM
Data Sourced
via MITRE·08:00 AM
DescriptionSeverityWeakness
Data Sourced
via NVD·08:15 AM
DescriptionSeverityWeaknessAffected Software
Frequently Asked Questions
1
What is the severity of CVE-2025-5868?
CVE-2025-5868 is classified as a critical vulnerability.
2
What components of RT-Thread are affected by CVE-2025-5868?
CVE-2025-5868 affects the sys_thread_sigprocmask function in the lwp_syscall.c file.
3
How do I fix CVE-2025-5868?
To resolve CVE-2025-5868, ensure that you validate the arguments and implement proper array index checks in your application.
4
What can happen if CVE-2025-5868 is exploited?
Exploitation of CVE-2025-5868 can lead to improper validation of array indices, which may result in unexpected behavior or application crashes.
5
Which version of RT-Thread is impacted by CVE-2025-5868?
CVE-2025-5868 impacts RT-Thread version 5.1.0.