CVE-2025-48751 Details
Description
The process_lock crate 0.1.0 for Rust allows data races in unlock.
A data race vulnerability has been identified in version 0.1.0 of the process_lock crate for Rust. The issue arises in the unlock function, which fails to be explicitly marked as unsafe. This oversight can lead to data races in safe Rust, particularly if the unlock function is called unexpectedly by the user. The vulnerability allows for concurrent processes to interfere with each other's lock management, potentially causing unpredictable behavior in applications that rely on this locking mechanism.
Users can manually ensure that the unlock function is called in a controlled manner, or modify the crate to include the necessary safety guarantees. However, this requires a good understanding of Rust's ownership and concurrency model.
Metrics
CVSS 4.0 Severity and Vector Strings:
No CVSS 4.0 data is available for this CVE.
CVSS 3.x Severity and Vector Strings:
No data available for CVSS Version 2.0 on this CVE.
CISA-ADP
Assessed May 24, 2025References to Advisories, Solutions, and Tools
By selecting these links, you will be leaving this site. These are references gathered from the official CVE record and are not endorsed by Volerion.
| URL | Source(s) | Tag(s) |
|---|---|---|
| https://crates.io/crates/process_lock | [email protected] | Product |
| https://github.com/tickbh/ProcessLock/issues/1 | [email protected] | ExploitIssue Tracking |
Weakness Enumeration
| CWE-ID | CWE Name | Source |
|---|---|---|
| CWE-362 | Concurrent Execution using Shared Resource with Improper Synchronization ('Race Condition') | [email protected] |
Affected Products
| Product | Versions |
|---|---|
| tickbh process lock | 0.1.0 |
CPE
Remediation
| |
Change History
4 change records found show changes
| Date | Action | Recorded By |
|---|---|---|
| Jun 17, 2026 | CVE Modified | [email protected] |
| Jun 17, 2026 | CVE Modified | CISA-ADP |
| Jan 30, 2026 | Initial Analysis | [email protected] |
| May 24, 2025 | New CVE Received | [email protected] |