What is the CVSS score of CVE-2025-52568?

CVE-2025-52568 has a CVSS 4.0 base score of 8.8 (High). CVSS vector: CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:H/VA:H/SC:N/SI:N/SA:N. EPSS exploitation probability: 0.4%.

Which versions of NeKernal are affected by CVE-2025-52568?

CVE-2025-52568 is a critical remote memory safety vulnerability in NeKernal that allows unauthenticated attackers to corrupt system memory and disk images, potentially execute arbitrary code, or…. A patch is available.

How to fix or mitigate CVE-2025-52568?

Within 24 hours: Identify all systems running NeKernal versions prior to 0.0.3 and isolate from production if assessment cannot be completed immediately. Within 7 days: Apply vendor-released patch to NeKernal version 0.0.3 or later on all affected systems, beginning with internet-facing or critical infrastructure deployments. Within 30 days: Verify patch deployment across entire NeKernal install base, validate system integrity post-patch, and review access logs for signs of exploitation.

NeKernal CVE-2025-52568

EUVD-2025-19027 HIGH

Improper Input Validation (CWE-20)

2025-06-24 security-advisories@github.com

RCE Buffer Overflow Denial Of Service Memory Corruption

8.8

CVSS 4.0 · GitHub Advisory

Severity by source

GitHub Advisory PRIMARY

8.8 HIGH

CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:H/VA:H/SC:N/SI:N/SA:N

Primary rating from GitHub Advisory · only source for this CVE.

CVSS VectorGitHub Advisory

CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:H/VA:H/SC:N/SI:N/SA:N

Attack Vector

Network

Attack Complexity

Low

Privileges Required

None

User Interaction

None

Lifecycle Timeline

Analysis Updated

Apr 16, 2026 - 06:36 EUVD-patch-fix

executive_summary

Re-analysis Queued

Apr 16, 2026 - 05:29 backfill_euvd_patch

patch_released

Patch available

Apr 16, 2026 - 05:29 EUVD

0.0.3

EUVD ID Assigned

Mar 15, 2026 - 22:36 euvd

EUVD-2025-19027

Analysis Generated

Mar 15, 2026 - 22:36 vuln.today

CVE Published

Jun 24, 2025 - 04:15 nvd

HIGH 8.8

DescriptionGitHub Advisory

NeKernal is a free and open-source operating system stack. Prior to version 0.0.3, there are several memory safety issues that can lead to memory corruption, disk image corruption, denial of service, and potential code execution. These issues stem from unchecked memory operations, unsafe typecasting, and improper input validation. This issue has been patched in version 0.0.3.

AnalysisAI

CVE-2025-52568 is a critical memory safety vulnerability in NeKernal (an open-source OS stack) prior to version 0.0.3 that enables memory corruption, disk image corruption, denial of service, and potential code execution through unchecked memory operations and unsafe typecasting. The vulnerability is remotely exploitable with no authentication or user interaction required (CVSS 8.8, AV:N/AC:L). All users running NeKernal versions before 0.0.3 are affected and should immediately upgrade to the patched version.

Technical ContextAI

NeKernal is an open-source operating system stack that lacks sufficient input validation and memory safety controls at the kernel level. The vulnerability class (CWE-20: Improper Input Validation) combined with memory corruption issues indicates the OS kernel fails to validate untrusted input before performing memory operations. The root causes include: (1) unchecked memory operations allowing buffer overflows or use-after-free conditions, (2) unsafe typecasting that can lead to type confusion attacks, and (3) improper input validation in kernel-level code paths. These memory safety gaps are characteristic of systems-level code written in memory-unsafe languages (likely C) without sufficient bounds checking, static analysis, or runtime protections. The fact that disk image corruption is possible suggests the vulnerability affects filesystem or I/O subsystems, potentially exploitable through crafted network packets or malformed filesystem inputs.

RemediationAI

action: Immediate Upgrade; details: Upgrade NeKernal to version 0.0.3 or later. This is the only available patch for CVE-2025-52568.; urgency: Critical
action: Source Code Review; details: Review the NeKernal v0.0.3 release notes and patch commits on the official repository (GitHub or primary distribution source) to understand specific memory safety fixes applied.
action: Network Segmentation (Temporary); details: If immediate upgrade is not feasible, isolate NeKernal systems from untrusted networks to reduce remote exploitation risk (CVSS indicates network-accessible vulnerability).
action: Input Validation Hardening; details: Implementadditionalsanitizationforuserland inputs to kernel interfaces until patched. Enable kernel-level exploit mitigations (ASLR, stack canaries, DEP/NX) if available.
action: Monitoring; details: Monitor for unusual memory access patterns, filesystem errors, or kernel panics that may indicate exploitation attempts against unpatched systems.