CVE-2024-25389

7.5 HIGH

Published: March 27, 2024 Modified: November 04, 2025

Description

RT-Thread through 5.0.2 generates random numbers with a weak algorithm of "seed = 214013L * seed + 2531011L; return (seed >> 16) & 0x7FFF;" in calc_random in drivers/misc/rt_random.c.

AI Explanation

Get an AI-powered plain-language explanation of this vulnerability and remediation steps.

CVSS v3.x Details

0.0 Low Medium High Critical 10.0

Vector String

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

References to Advisories, Solutions, and Tools

Patch Vendor Advisory Exploit Third Party Advisory

http://www.openwall.com/lists/oss-security/2024/03/05/1

Source: cve@mitre.org

Issue Tracking Mailing List

https://github.com/RT-Thread/rt-thread/issues/8283

Source: cve@mitre.org

Issue Tracking Mitigation

https://github.com/hnsecurity/vulns/blob/main/HNS-2024-05-rt-thread.txt

Source: cve@mitre.org

Third Party Advisory

https://seclists.org/fulldisclosure/2024/Mar/28

Source: cve@mitre.org

Mailing List

https://security.humanativaspa.it/multiple-vulnerabilities-in-rt-thread-rtos/

Source: cve@mitre.org

Third Party Advisory

http://seclists.org/fulldisclosure/2024/Mar/28