CVE-2025-6365

A vulnerability was found in HobbesOSR Kitten up to c4f8b7c3158983d1020af432be1b417b28686736 and classified as critical. Affected by this issue is the function set_pte_at in the library /include/arch-arm64/pgtable.h. The manipulation leads to resource consumption. Continious delivery with rolling releases is used by this product. Therefore, no version details of affected nor updated releases are available.

• CWE-400
• CWE-404
• CWE-835

• https://github.com/HobbesOSR/kitten/issues/17Exploit, Issue Tracking, Vendor Advisory
• https://vuldb.com/?ctiid.313358Permissions Required, VDB Entry
• https://vuldb.com/?id.313358Third Party Advisory, VDB Entry
• https://vuldb.com/?submit.597382Third Party Advisory, VDB Entry
• https://github.com/HobbesOSR/kitten/issues/17Exploit, Issue Tracking, Vendor Advisory

Published

Jun 20, 2025

Last Modified

Jun 17, 2026

Status

Analyzed

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2025-63640Sourcecodester Medicine Reminder App v1.0 is vulnerable to C…6.1
• CVE-2025-63644A stored cross-site scripting (XSS) vulnerability exists in …5.4
• CVE-2025-63645A stored cross-site scripting (XSS) vulnerability exists in …5.4
• CVE-2025-63647A NULL pointer dereference in the parse_meta function (src/h…7.5
• CVE-2025-63648A NULL pointer dereference in the dacp_reply_playqueueedit_m…7.5
• CVE-2025-63649An out-of-bounds read in the http_parser_transfer_encoding_c…7.5
• CVE-2025-63650An out-of-bounds read in the mk_ptr_to_buf in mk_core functi…7.5
• CVE-2025-63651A use-after-free in the mk_string_char_search function (mk_c…7.5
• CVE-2025-63652A use-after-free in the mk_http_request_end function (mk_ser…7.5
• CVE-2025-63653An out-of-bounds read in the mk_vhost_fdt_close function (mk…7.5
• CVE-2025-63655A NULL pointer dereference in the mk_http_range_parse functi…7.5
• CVE-2025-63656An out-of-bounds read in the header_cmp function (mk_server/…7.5