CVE-2024-25389: Rt-Thread

High severity, CVSS 7.5. EPSS: 0.8% chance of exploitation in the next 30 days.

RT-Thread through 5.0.2 generates random numbers with a weak algorithm of "seed = 214013L * seed + 2531011L; return (seed >> 16) & 0x7FFF;" in calc_random in drivers/misc/rt_random.c.

Affected products

• Rt-Thread Rt-Thread: up to and including 5.0.2

Published 2024-03-27. Last modified 2026-06-17.