« Volver al listado

CVE-2025-1290

Estado: AnalizadaAlta (8.1)—

A race condition Use-After-Free vulnerability exists in the virtio_transport_space_update function within the Kernel 5.4 on ChromeOS. Concurrent allocation and freeing of the virtio_vsock_sock structure during an AF_VSOCK connect syscall can occur before a worker thread accesses it resulting in a dangling pointer and potential kernel code execution.

CVSS

Probabilidad de explotación (EPSS)

EPSS (Exploit Prediction Scoring System, de FIRST) estima la probabilidad de que una vulnerabilidad sea explotada en 30 días. Complementa a CVSS (impacto) y a CISA KEV (explotación confirmada).

🎯 Técnicas ATT&CK

Cómo se explota esta vulnerabilidad y qué consigue el atacante, en el lenguaje de MITRE ATT&CK.

Vulnerabilidad remota de race condition Use-After-Free (CWE-416) en ChromeOS accesible por red sin autenticación. Ejecución de código kernel vía explotación de condición de carrera en AF_VSOCK, vector CVSS:3.1/AV:N/AC:H/PR:N/UI:N.

Inferido por nuestro agente de análisis a partir de la descripción oficial, el vector CVSS y la CWE, y comprobado por un supervisor. Puede contener errores.

🛡️ Mitigaciones ATT&CK que cubren estas técnicas

Privileged Account ManagementExecution PreventionApplication Isolation and SandboxingExploit ProtectionUpdate SoftwareVulnerability Scanning

Tecnologías afectadas (1)

Google — Chrome OS

CWE

Referencias

JSON original (NVD)

Mostrar
{
  "id": "CVE-2025-1290",
  "cveTags": [],
  "metrics": {
    "ssvcV203": [
      {
        "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "ssvcData": {
          "id": "CVE-2025-1290",
          "role": "CISA Coordinator",
          "options": [
            {
              "exploitation": "none"
            },
            {
              "automatable": "no"
            },
            {
              "technicalImpact": "total"
            }
          ],
          "version": "2.0.3",
          "timestamp": "2025-04-17T13:25:56.436790Z"
        }
      }
    ],
    "cvssMetricV31": [
      {
        "type": "Secondary",
        "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "cvssData": {
          "scope": "UNCHANGED",
          "version": "3.1",
          "baseScore": 8.1,
          "attackVector": "NETWORK",
          "baseSeverity": "HIGH",
          "vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H",
          "integrityImpact": "HIGH",
          "userInteraction": "NONE",
          "attackComplexity": "HIGH",
          "availabilityImpact": "HIGH",
          "privilegesRequired": "NONE",
          "confidentialityImpact": "HIGH"
        },
        "impactScore": 5.9,
        "exploitabilityScore": 2.2
      }
    ]
  },
  "affected": [
    {
      "source": "7f6e188d-c52a-4a19-8674-3c3fa7d1fc7f",
      "affectedData": [
        {
          "vendor": "Google",
          "product": "ChromeOS",
          "versions": [
            {
              "status": "affected",
              "version": "15474.84.0",
              "lessThan": "15474.84.0",
              "versionType": "custom"
            }
          ]
        }
      ]
    }
  ],
  "published": "2025-04-17T01:15:46.317",
  "references": [
    {
      "url": "https://issues.chromium.org/issues/b/301886931",
      "tags": [
        "Broken Link"
      ],
      "source": "7f6e188d-c52a-4a19-8674-3c3fa7d1fc7f"
    },
    {
      "url": "https://issuetracker.google.com/issues/301886931",
      "tags": [
        "Exploit",
        "Issue Tracking",
        "Mailing List"
      ],
      "source": "7f6e188d-c52a-4a19-8674-3c3fa7d1fc7f"
    }
  ],
  "vulnStatus": "Analyzed",
  "weaknesses": [
    {
      "type": "Secondary",
      "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
      "description": [
        {
          "lang": "en",
          "value": "CWE-416"
        }
      ]
    }
  ],
  "descriptions": [
    {
      "lang": "en",
      "value": "A race condition Use-After-Free vulnerability exists in the virtio_transport_space_update function within the Kernel 5.4 on ChromeOS. Concurrent allocation and freeing of the virtio_vsock_sock structure \nduring an AF_VSOCK connect syscall can occur before a worker thread accesses it resulting in a dangling pointer and potential kernel code execution."
    },
    {
      "lang": "es",
      "value": "Existe una vulnerabilidad de condición de ejecución de tipo \"Use-After-Free\" en la función virtio_transport_space_update del kernel 5.4 de ChromeOS. La asignación y liberación simultáneas de la estructura virtio_vsock_sock durante una llamada al sistema de conexión AF_VSOCK pueden ocurrir antes de que un subproceso de trabajo acceda a ella, lo que resulta en un puntero colgante y la posible ejecución de código del kernel."
    }
  ],
  "lastModified": "2026-06-17T08:38:45.170",
  "configurations": [
    {
      "nodes": [
        {
          "negate": false,
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:o:google:chrome_os:15474.84.0:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "D9680D00-396A-4A01-BD44-C09288E994A9"
            }
          ],
          "operator": "OR"
        },
        {
          "negate": false,
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:o:linux:linux_kernel:5.4:-:*:*:*:*:*:*",
              "vulnerable": false,
              "matchCriteriaId": "4D70AB13-37BE-4BD3-A652-10191F1642E4"
            }
          ],
          "operator": "OR"
        }
      ],
      "operator": "AND"
    }
  ],
  "sourceIdentifier": "7f6e188d-c52a-4a19-8674-3c3fa7d1fc7f"
}