CVE-2025-1290

A race condition Use-After-Free vulnerability exists in the virtiotransportspaceupdate function within the Kernel 5.4 on ChromeOS. Concurrent allocation and freeing of the virtiovsocksock structure during an AFVSOCK connect syscall can occur before a worker thread accesses it resulting in a...

CVE-2025-1290

A race condition Use-After-Free vulnerability exists in the virtio_transport_space_update function within the Kernel 5.4 on ChromeOS . The issue occurs when concurrent allocation and freeing of the virtio_vsock_sock structure happens during an AF_VSOCK connect syscall before a worker thread can a...

Google ChromeOS Kernel security vulnerabilities

Google ChromeOS is an operating system based on the Linux kernel. Google ChromeOS suffers from a use-after-release vulnerability that stems from the presence of a competing conditional use-after-release reuse in the virtiotransportspaceupdate function, which can be exploited by an attacker to cau...

PT-2025-16924 · Google · Kernel

Name of the Vulnerable Software and Affected Versions: ChromeOS Kernel versions prior to 6.1 ChromeOS Kernel version 5.4 Description: A race condition Use-After-Free vulnerability exists in the virtio transport space update function. Concurrent allocation and freeing of the virtio vsock sock...

CVE-2025-2073

Out-of-Bounds Read in netfilter/ipset in Linux Kernel ChromeOS 6.1, 5.15, 5.10, 5.4, 4.19 allows a local attacker with low privileges to trigger an out-of-bounds read, potentially leading to information disclosure...

CVE-2025-2073

Out-of-Bounds Read in netfilter/ipset in Linux Kernel ChromeOS 6.1, 5.15, 5.10, 5.4, 4.19 allows a local attacker with low privileges to trigger an out-of-bounds read, potentially leading to information disclosure...

CVE-2025-2073

Google ChromeOS is vulnerable to an Out-of-Bounds Read in the netfilter/ipset component of the Linux Kernel (specifically versions 6.1, 5.15, 5.10, 5.4, and 4.19). The issue stems from a lack of proper validation of user-supplied data in the ip_set_bitmap_ip.c file, specifically affecting the bit...

ChromeOS Kernel Code Execution

The vulnerability of the ChromeOS operating system’s kernel exists due to insufficient validation of input data. Exploiting this vulnerability can allow a perpetrator to execute arbitrary code...

Google ChromeOS Kernel Privilege Escalation

The vulnerability of the Google ChromeOS operating system is related to deficiencies in access control. Exploiting this vulnerability can allow a hacker to bypass security restrictions and increase their privileges...