Resource exhaustion in Nekernel-Org Nekernel
CVE-2025-52568
NeKernal is a free and open-source operating system stack. Prior to version 0.0.3, there are several memory safety issues that can lead to memory corruption, disk image corruption, denial of service, and potential code execution. These issues stem from unchecked memory operations, unsafe typecasting, and improper input validation. This issue has been patched in version 0.0.3.
Vulnerability class: Drupalgeddon 2 (CVE-2018-7600)
Published · last modified .
EPSS exploit prediction
EPSS: 0.005 (42.8th percentile), scored .
Very low probability of exploitation in the next 30 days; routine patching cadence is appropriate. 43rd percentile — 42.8% of CVEs in the catalogue have a lower EPSS than this one. How to read EPSS.
EPSS over last 30 days · oldest: 0.005 · newest: 0.005 · change: +0.001
Affected products
- Nekernel-Org Nekernel — versions < 0.0.3
Weakness classification (CWE)
References
- github.com/nekernel-org/nekernel/security/advisories/GHSA-cmp2-5f6g-mw34
- github.com/nekernel-org/nekernel/pull/35
- github.com/nekernel-org/nekernel/pull/36
- github.com/nekernel-org/nekernel/commit/6506875ad0ab210b82a5c4ce227bf851508de17d
- github.com/nekernel-org/nekernel/commit/6511afbf405c31513bc88ab06bca58218610a994