Vulnerability in Apache Software Foundation Nuttx Rtos
CVE-2025-48768
Release of Invalid Pointer or Reference vulnerability was discovered in fs/inode/fs_inoderemove code of the Apache NuttX RTOS that allowed root filesystem inode removal leading to a debug assert trigger (that is disabled by default), NULL…
EPSS: 0.000 (5.8th percentile) — read the EPSS interpretation.
Affected products
- Apache Software Foundation Nuttx Rtos — versions 10.0.0
Weakness classification (CWE)
References
- github.com/apache/nuttx/pull/16437 (patch)
- lists.apache.org/thread/nwo1kd08b7t3dyz082q2pghdxwvxwyvo (vendor-advisory)