CVE-2025-48752 - In the process-sync crate 0.2.2 for Rust, the drop function lacks a check for whether the pthread_mutex is unlocked

Back Back to CVE browser

CRITICAL

In the process-sync crate 0.2.2 for Rust, the drop function lacks a check for whether the pthread_mutex is unlocked

Published May 24, 2025

9.8

CRITICAL

CVSS 3.1

EPSS 0.34%

Description

In the process-sync crate 0.2.2 for Rust, the drop function lacks a check for whether the pthread_mutex is unlocked.

Affected products

Vendor Forestryks Product Process-Sync-RS Default
n/a
- Version
  0.2.2
  Status
  affected
  Constraints
  -

Default status is the baseline for the product, each version can override it (e.g. patched versions marked unaffected).

Vendor

Product

Default status

Versions

Forestryks

Process-Sync-RS

n/a

Version	Status	Constraints
0.2.2	affected	-

Remediation

No remediation recorded yet.

Weaknesses (1)

CWE-416

Use After Free

References (4)

https://crates.io/crates/process-sync
Product
https://github.com/Forestryks/process-sync-rs/issues/3
ExploitIssue Tracking
https://github.com/advisories/GHSA-mqwx-r894-9hfp
Advisory
https://nvd.nist.gov/vuln/detail/CVE-2025-48752

Link	Providers	Tags
https://crates.io/crates/process-sync		Product
https://github.com/Forestryks/process-sync-rs/issues/3		ExploitIssue Tracking
https://github.com/advisories/GHSA-mqwx-r894-9hfp		Advisory
https://nvd.nist.gov/vuln/detail/CVE-2025-48752

Change history (0)

No recorded changes yet.

Sources

CVE.org / MITRE

Status PUBLISHED

Assigner mitre

Published May 24, 2025

Updated May 24, 2025

Reserved May 24, 2025

Link CVE-2025-48752

CISA Vulnrichment

Updated May 24, 2025

NVD

Status Analyzed

Modified Jun 17, 2026

Link CVE-2025-48752

Red Hat

Severity n/a

Public date n/a

Links CVE-2025-48752

GHSA-MQWX-R894-9HFP