PT-2025-22828 · Unknown · Process Lock

Published 2025-05-24 · Updated 2025-05-24 · CVE-2025-48751

Positive Technologies (AI Summary)

CVSS v3.1

9.8

Critical

Base vector

AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions process lock crate version 0.1.0

Description The issue allows data races in unlock, which can lead to unpredictable behavior.

Recommendations For process lock crate version 0.1.0, consider avoiding the use of the unlock functionality until a patch is available. At the moment, there is no information about a newer version that contains a fix for this issue.

Exploit

Fix

Race Condition

Weakness Enumeration

CWE-362

Related Identifiers

CVE-2025-48751

GHSA-6V24-6WGF-8VJ6

Affected Products

Process Lock

References · 9

• 🔥 https://github.com/tickbh/ProcessLock/issues/1 · Exploit
• https://osv.dev/vulnerability/GHSA-6v24-6wgf-8vj6 · Vendor Advisory
• https://osv.dev/vulnerability/CVE-2025-48751 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2025-48751 · Security Note
• https://github.com/tickbh/ProcessLock · Note
• https://crates.io/crates/process_lock · Note
• https://t.me/cvenotify/123525 · Telegram Post
• https://t.me/cvetracker/24570 · Telegram Post
• https://twitter.com/CVEnew/status/1926244412272632179 · Twitter Post