High severity · published Jun 24, 2025
CVE-2025-52568
NeKernal Multiple Memory Corruption Vulnerabilities in mkfs.hefs
8.8
CVSS
0.5%
EPSS
No
On KEV
Description
NeKernal is a free and open-source operating system stack. Prior to version 0.0.3, there are several memory safety issues that can lead to memory corruption, disk image corruption, denial of service, and potential code execution. These issues stem from unchecked memory operations, unsafe typecasting, and improper input validation. This issue has been patched in version 0.0.3.
Exploitation
Is it being used?
Exploit prediction (EPSS)0.5% · higher than 45% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
NE
nekernel · nekernel-org
< 0.0.3 · source: vendor
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2025-52568
CVE.org
https://www.cve.org/CVERecord?id=CVE-2025-52568
github.com
https://github.com/nekernel-org/nekernel/commit/6506875ad0ab210b82a5c4ce227bf851508de17d
github.com
https://github.com/nekernel-org/nekernel/commit/6511afbf405c31513bc88ab06bca58218610a994
github.com
https://github.com/nekernel-org/nekernel/pull/35
github.com
https://github.com/nekernel-org/nekernel/pull/36
github.com
https://github.com/nekernel-org/nekernel/security/advisories/GHSA-cmp2-5f6g-mw34
More from nekernel
8.6
CVE-2025-48990
NeKernel has Heap Overflow in `rt_copy_memory`