CVE-2025-1290

A race condition Use-After-Free vulnerability exists in the virtiotransportspaceupdate function within the Kernel 5.4 on ChromeOS. Concurrent allocation and freeing of the virtiovsocksock structure during an AFVSOCK connect syscall can occur before a worker thread accesses it resulting in a...

CVE-2025-1290

A race condition Use-After-Free vulnerability exists in the virtio_transport_space_update function within the Kernel 5.4 on ChromeOS . The flaw occurs during an AF_VSOCK connect syscall where concurrent allocation and freeing of the virtio_vsock_sock structure can lead to a dangling pointer. This...

PT-2025-16924 · Google · Kernel

Name of the Vulnerable Software and Affected Versions: ChromeOS Kernel versions prior to 6.1 ChromeOS Kernel version 5.4 Description: A race condition Use-After-Free vulnerability exists in the virtio transport space update function. Concurrent allocation and freeing of the virtio vsock sock...

Google ChromeOS Kernel 安全漏洞

Google ChromeOS is an operating system based on the Linux kernel. Google ChromeOS suffers from a use-after-release vulnerability that stems from the presence of a competing conditional use-after-release reuse in the virtiotransportspaceupdate function, which can be exploited by an attacker to cau...

CVE-2025-2073

Out-of-Bounds Read in netfilter/ipset in Linux Kernel ChromeOS 6.1, 5.15, 5.10, 5.4, 4.19 allows a local attacker with low privileges to trigger an out-of-bounds read, potentially leading to information disclosure...

CVE-2025-2073

Out-of-Bounds Read in netfilter/ipset in Linux Kernel ChromeOS 6.1, 5.15, 5.10, 5.4, 4.19 allows a local attacker with low privileges to trigger an out-of-bounds read, potentially leading to information disclosure...

CVE-2025-2073

Google ChromeOS is vulnerable to an Out-of-Bounds Read in the netfilter/ipset component of the Linux Kernel (specifically versions 6.1, 5.15, 5.10, 5.4, and 4.19). The issue stems from a lack of proper validation of user-supplied data in the ip_set_bitmap_ip.c file, specifically affecting the bit...

The vulnerability of the ChromeOS operating system’s kernel, which arises due to insufficient validation of input data, allows a hacker to execute arbitrary code.

The vulnerability of the ChromeOS operating system’s kernel exists due to insufficient validation of input data. Exploiting this vulnerability can allow a perpetrator to execute arbitrary code...

The vulnerability of the Google ChromeOS operating system’s kernel allows attackers to circumvent security restrictions and increase their privileges.

The vulnerability of the Google ChromeOS operating system is related to deficiencies in access control. Exploiting this vulnerability can allow a hacker to bypass security restrictions and increase their privileges...