CVE-2025-1115

Name of the Vulnerable Software and Affected Versions RT-Thread versions up to 5.1.0

Description A problematic vulnerability was found in RT-Thread. The issue affects the sys thread create function of the file rt-thread/components/lwp/lwp syscall.c. The manipulation of the argument arg[0] leads to information disclosure. An attack has to be approached locally.

Recommendations For RT-Thread versions up to 5.1.0, consider disabling the sys thread create function until a patch is available to prevent information disclosure. Restrict access to the file rt-thread/components/lwp/lwp syscall.c to minimize the risk of exploitation. Avoid using the argument arg[0] in the affected function until the issue is resolved.