This vulnerability affects the recvmsg function in the bsp/loongson/ls1cdev/libraries/ls1c_can.h file of the ls1c CAN Handler component in RT-Thread up to version 5.0.2. It allows a local attacker with low privileges to cause a stack-based buffer overflow, potentially leading to high-impact consequences such as code execution or system compromise. The vendor has not issued any fix or advisory, and no patch links are available. The CVSS v4.0 score is 8.5, reflecting high severity with low attack complexity and no user interaction required.

Successful exploitation of this vulnerability can result in a stack-based buffer overflow, which may allow an attacker with local access and low privileges to execute arbitrary code or cause a denial of service. The vulnerability affects confidentiality, integrity, and availability with high impact. No known exploits are reported in the wild yet, but a public exploit is available.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Since the vendor has not responded or provided a fix, users should consider restricting local access to affected systems and monitor for suspicious activity related to the ls1c CAN Handler. Applying any future official patches promptly is recommended once available.