CVE-2025-1290 Details
Description
A race condition Use-After-Free vulnerability exists in the virtio_transport_space_update function within the Kernel 5.4 on ChromeOS. Concurrent allocation and freeing of the virtio_vsock_sock structure during an AF_VSOCK connect syscall can occur before a worker thread accesses it resulting in a dangling pointer and potential kernel code execution.
A race condition use-after-free vulnerability has been identified in the ChromeOS kernel version 5.4, specifically within the virtio_transport_space_update function. This vulnerability arises from concurrent allocation and deallocation of the virtio_vsock_sock structure during an AF_VSOCK connect syscall. The timing of these operations can create a dangling pointer, potentially leading to unauthorized execution of kernel code.
The vulnerability has been fixed in the ChromeOS kernel by backporting an upstream patch that addresses the race condition. Users should ensure they are running a version of ChromeOS that includes this fix.
Metrics
CVSS 4.0 Severity and Vector Strings:
No CVSS 4.0 data is available for this CVE.
CVSS 3.x Severity and Vector Strings:
No data available for CVSS Version 2.0 on this CVE.
CISA-ADP
Assessed Apr 17, 2025References to Advisories, Solutions, and Tools
By selecting these links, you will be leaving this site. These are references gathered from the official CVE record and are not endorsed by Volerion.
| URL | Source(s) | Tag(s) |
|---|---|---|
| https://issues.chromium.org/issues/b/301886931 | ChromeOS | Broken Link |
| https://issuetracker.google.com/issues/301886931 | ChromeOS | ExploitIssue TrackingMailing List |
Weakness Enumeration
| CWE-ID | CWE Name | Source |
|---|---|---|
| CWE-416 | Use After Free | CISA-ADP |
Affected Products
| Product | Versions |
|---|---|
| google chrome os | 15474.84.0 |
CPE
Remediation
| |
| linux linux kernel | 5.4 - |
CPE
Remediation
| |
Change History
5 change records found show changes
| Date | Action | Recorded By |
|---|---|---|
| Jun 17, 2026 | CVE Modified | ChromeOS |
| Jun 17, 2026 | CVE Modified | CISA-ADP |
| Jul 11, 2025 | Initial Analysis | [email protected] |
| Apr 17, 2025 | CVE Modified | CISA-ADP |
| Apr 17, 2025 | New CVE Received | ChromeOS |