CVE-2025-6365

HobbesOSR Kitten pgtable.h set_pte_at resource consumption

State: Published
Severity: 6.9 Medium
Published: Jun 20, 2025
Updated: Jun 23, 2025
Reserved: Jun 19, 2025

Description

A vulnerability was found in HobbesOSR Kitten up to c4f8b7c3158983d1020af432be1b417b28686736 and classified as critical. Affected by this issue is the function set_pte_at in the library /include/arch-arm64/pgtable.h. The manipulation leads to resource consumption. Continious delivery with rolling releases is used by this product. Therefore, no version details of affected nor updated releases are available.

Scores

CVSS	Score	Vector	Source
4.0	6.9 Medium	CVSS:4.0/AV:A/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N/E:X	VulDB
3.1	5.7 Medium	CVSS:3.1/AV:A/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H/E:X/RL:X/RC:R	VulDB
3.0	5.7 Medium	CVSS:3.0/AV:A/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H/E:X/RL:X/RC:R	VulDB
2.0	5.2 Medium	AV:A/AC:M/Au:S/C:N/I:N/A:C/E:ND/RL:ND/RC:UR	VulDB

Weaknesses

CWE-400 Resource Consumption
CWE-404 Denial of Service

Affected Products

Product	Versions
KittenHobbesOSR	c4f8b7c3158983d1020af432be1b417b28686736Affected

References

VDB-313358 | HobbesOSR Kitten pgtable.h set_pte_at resource consumptionvdb-entrytechnical-description
VDB-313358 | CTI Indicators (IOB, IOC, IOA)signaturepermissions-required
Submit #597382 | HobbesOSR kitten 0.0 Resource Consumptionthird-party-advisory
https://github.com/HobbesOSR/kitten/issues/17issue-tracking

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.