The vulnerability resides in the Parameter Handler component of RT‑Thread, specifically the ioctl implementation in lwp_syscall.c. Crafted calls to the ioctl function using malformed or zero parameters trigger a division‑by‑zero error (CWE‑369). Because the error is not handled, the kernel may fault, leading to a process or system crash that manifests as a loss of service (CWE‑404). The description states that the flaw can be exploited remotely, indicating that an attacker can send malicious ioctl requests to an exposed RT‑Thread device and provoke a denial of service condition. It is inferred that the unhandled division‑by‑zero will cause a kernel fault and restart, which would appear as a crash, though the CVE itself does not explicitly confirm a crash.

RT‑Thread RT‑Thread up to version 5.2.2. Any device or embedded system that incorporates an affected RT‑Thread release is potentially vulnerable. The affected code is located within the Parameter Handler component, specifically lwp_syscall.c. No additional product variants are listed.

The CVSS score of 5.3 classifies the vulnerability as medium severity. The EPSS score of < 1 % indicates a low probability of exploitation, but the existence of a published exploit and the statement that the attack may be launched remotely raise concern. The vulnerability is not listed in the CISA KEV catalog. The attack vector is likely remote, with the attacker needing the ability to send a specially crafted ioctl request to the vulnerable interface.