CVE-2025-46158

MEDIUM

redoxOS kernel - Denial of Service via setitimer Syscall

Title source: llm

An issue in redoxOS kernel before commit 5d41cd7c allows a local attacker to cause a denial of service via the `setitimer` syscall

Core 3

Core References

Patch, Third Party Advisory

Exploit, Issue Tracking

Issue Tracking

CVSS v3 6.2

EPSS 0.0019

EPSS Percentile 8.4%

Attack Vector LOCAL

CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

Vulnrichment

Exploitation poc

Automatable no

Technical Impact partial

CWE

CWE-369

Status published

Products (1)

redox-os/redox 0.8.0

Published Jun 20, 2025

Tracked Since Feb 18, 2026