CVE-2025-30444

A race condition was addressed with improved locking

Critical · published March 31, 2025

CVSS v3.1
9.8
EPSS
1%
Percentile
55.0
In the wild
Unconfirmed
What it is

🚨 A sneaky race condition allows a malicious SMB network share to crash your Mac! 🔥 Think of this like a traffic jam where two cars try to enter the same intersection at the same time, causing a major collision. In this case, the improper locking leads to system termination instead of a simple fender bender! If exploited, this vulnerability could bring your entire system to a sudden halt, resulting in data loss and significant inconvenience. Imagine losing all your unsaved work just because someone crafted a malicious network share! This is a critical issue that demands immediate attention.

Put simply

Think of this like a traffic jam where two cars try to enter the same intersection at the same time, causing a major collision. In this case, the improper locking leads to system termination instead of a simple fender bender! This race condition vulnerability in macOS occurs when mounting a maliciously crafted SMB share, failing to properly manage concurrent access, ultimately leading to system termination.

What to do

If exploited, this vulnerability could bring your entire system to a sudden halt, resulting in data loss and significant inconvenience. Imagine losing all your unsaved work just because someone crafted a malicious network share! This is a critical issue that demands immediate attention. To protect your system, update to macOS Sequoia 15.4, macOS Sonoma 14.7.5, or macOS Ventura 13.7.5 immediately. Ensure your device is set to automatically apply updates to prevent future vulnerabilities. You've got this! With these updates, you'll be back to safe computing in no time! 🛡️

The record
Technical detail
CVSS v3.1
9.8 · CRITICAL
Vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
CVSS v4.0
Not supplied
EPSS
0.00765 · 55.0th percentile
Published
2025-03-31T22:22Z
EPSS history
Timeline
  • 31 MAR 22:22Z
    A race condition was addressed with improved locking
    cvelistv5