CVE-2025-6365

Katalog CVE

CVSS 7.5 · High EPSS 0,79%

Kerentanan Uncontrolled Resource Consumption pada hobbesosr kitten. Skor CVSS 3.1 7.5 (High) menurut NVD.

Deskripsi (NVD)

A vulnerability was found in HobbesOSR Kitten up to c4f8b7c3158983d1020af432be1b417b28686736 and classified as critical. Affected by this issue is the function set_pte_at in the library /include/arch-arm64/pgtable.h. The manipulation leads to resource consumption. Continious delivery with rolling releases is used by this product. Therefore, no version details of affected nor updated releases are available.

Rincian

Terbit di NVD

20 Juni 2025

Terakhir diubah

17 Juni 2026

Status NVD

Analyzed

CVSS 3.1

7.5 (High), sumber NVD
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H · uraikan di kalkulator

Jenis kelemahan (CWE)

CWE-400: Uncontrolled Resource Consumption
CWE-404: Improper Resource Shutdown or Release
CWE-835: Loop with Unreachable Exit Condition ('Infinite Loop')

EPSS (30 hari)

0,79% peluang dieksploitasi; lebih tinggi dari 55,0% CVE lain

Produk dan versi terdampak

> Data dari konfigurasi CPE di NVD.

Referensi dan perbaikan

• https://github.com/HobbesOSR/kitten/issues/17 exploit · issue tracking · advisory vendor
• https://vuldb.com/?id.313358 advisory pihak ketiga · vdb entry
• https://vuldb.com/?submit.597382 advisory pihak ketiga · vdb entry
• https://vuldb.com/?ctiid.313358 permissions required · vdb entry