CVE-2025-1115 RT-Thread lwp_syscall.c sys_timer_settime information disclosure
A local attacker can exploit improper input validation in RT-Thread system calls to disclose sensitive information.
- Exploited in the wild
- Not known
- Login needed
- Any signed-in user
- Attackable
- Local or same network only
- Victim action needed
- Not needed
- Fix
- None listed
What is CVE-2025-1115?
CVE-2025-1115 is a medium-severity vulnerability in RT-Thread, published on 8 Feb 2025. It can only be exploited from the same machine or local network, with no action from the victim.
Official description
A vulnerability classified as problematic was found in RT-Thread up to 5.1.0. Affected by this vulnerability is the function sys_device_close/sys_device_control/sys_device_find/sys_device_init/sys_device_open/sys_device_read/sys_device_register/sys_device_write/sys_event_delete/sys_event_recv/sys_event_send/sys_mb_delete/sys_mb_recv/sys_mb_send/sys_mb_send_wait/sys_mq_recv/sys_mq_send/sys_mq_urgent/sys_mutex_delete/sys_mutex_release/sys_mutex_take/sys_rt_timer_control/sys_rt_timer_delete/sys_rt_timer_start/sys_rt_timer_stop/sys_sem_delete/sys_sem_release/sys_sem_take/sys_shmat/sys_shmdt/sys_thread_create/sys_thread_delete/sys_thread_startup/sys_timer_delete/sys_timer_gettime/sys_timer_settime of the file rt-thread/components/lwp/lwp_syscall.c. The manipulation of the argument arg[0] leads to information disclosure. An attack has to be approached locally.
Which versions are affected by CVE-2025-1115?
It affects 1 product.
Products include Rt-Thread Rt-Thread.
How do I fix CVE-2025-1115?
No fix has been published for CVE-2025-1115 yet. Limit exposure of the affected software until one is available.
Is CVE-2025-1115 being exploited?
It is not confirmed as exploited in the wild, but public exploit code for CVE-2025-1115 exists.
Other vulnerabilities in RT-Thread
Sources
Also known as GHSA-4ch9-xrp7-23v7.