PT-2025-26691 · Nekernal · Nekernal

0Xf00Sec · Published 2025-06-24 · Updated 2025-06-24 · CVE-2025-52568

Positive Technologies (AI Summary)

CVSS v4.0

8.8

High

Base vector

AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:H/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X

Name of the Vulnerable Software and Affected Versions: NeKernal versions prior to 0.0.3

Description: The issue is related to memory safety problems that can cause memory corruption, disk image corruption, denial of service, and potential code execution. These problems arise from unchecked memory operations, unsafe typecasting, and improper input validation.

Recommendations: For versions prior to 0.0.3, update to version 0.0.3 to resolve the issue. As a temporary workaround, consider implementing additional input validation and memory operation checks to minimize the risk of exploitation. Restrict access to sensitive operations to prevent potential code execution until the update is applied.

Exploit

Fix

DoS

Allocation of Resources Without Limits

RCE

Weakness Enumeration

CWE-770

CWE-20

Related Identifiers

CVE-2025-52568

GHSA-CMP2-5F6G-MW34

Affected Products

Nekernal

References · 13

• 🔥 https://github.com/CVEProject/cvelistV5/tree/main/cves/2025/52xxx/CVE-2025-52568.json · Exploit
• https://osv.dev/vulnerability/CVE-2025-52568 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2025-52568 · Security Note
• https://github.com/nekernel-org/nekernel/commit/6511afbf405c31513bc88ab06bca58218610a994 · Note
• https://github.com/nekernel-org/nekernel/pull/35 · Note
• https://github.com/nekernel-org/nekernel/pull/36 · Note
• https://github.com/nekernel-org/nekernel/security/advisories/GHSA-cmp2-5f6g-mw34 · Note
• https://github.com/nekernel-org/nekernel/commit/6506875ad0ab210b82a5c4ce227bf851508de17d · Note
• https://t.me/cvetracker/26913 · Telegram Post
• https://twitter.com/VulmonFeeds/status/1937445101124403595 · Twitter Post
• https://twitter.com/CVEnew/status/1937366676720234845 · Twitter Post
• https://t.me/cvenotify/126456 · Telegram Post
• https://t.me/latest_high_impact_cve/2797 · Telegram Post