CVE-2025-1290

Published: Apr 17, 2025Modified: Jun 17, 2026

8.1

Vector

CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H

Exploitability: 2.2 / Impact: 5.9

Source: 134c704f-9b21-4f2e-91b3-4a467353bcc0 (Secondary)

Description

A race condition Use-After-Free vulnerability exists in the virtio_transport_space_update function within the Kernel 5.4 on ChromeOS. Concurrent allocation and freeing of the virtio_vsock_sock structure during an AF_VSOCK connect syscall can occur before a worker thread accesses it resulting in a dangling pointer and potential kernel code execution.

Affected (1)

Products: Google: Chrome Os

1 product

Configuration A

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Google Chrome Os	Version 15474.84.0

Running on/with	Platform Versions
Linux Linux Kernel	Version 5.4

Related CWEs

The product reuses or references memory after it has been freed. At some point afterward, the memory may be allocated again and saved in another pointer, while the original pointer references a location somewhere within the new allocation. Any operations using the original pointer are no longer valid because the memory "belongs" to the code that operates on the new pointer.

References (2)

https://issues.chromium.org/issues/b/301886931

Source: 7f6e188d-c52a-4a19-8674-3c3fa7d1fc7f

Broken Link

https://issuetracker.google.com/issues/301886931

Source: 7f6e188d-c52a-4a19-8674-3c3fa7d1fc7f

ExploitIssue TrackingMailing List

Timeline

No history available yet.