CVE-2025-30444

Malicious SMB Share Causes System Termination via Race Condition in macOS

Published Mar 31, 2025 CVSS 3.1 · 9.8 Critical EPSS < 1% KEV · Not listed

Description

A race condition was addressed with improved locking. This issue is fixed in macOS Sequoia 15.4, macOS Sonoma 14.7.5, macOS Ventura 13.7.5. Mounting a maliciously crafted SMB network share may lead to system termination.

Analysis

Technical impact

A race condition that existed in certain macOS releases was addressed in newer versions with improved locking. The flaw can be triggered by mounting a maliciously crafted SMB network share, and it may cause the entire macOS system to terminate, effectively leading to a denial of service. This vulnerability is identified as a race condition (CWE‑362) and therefore can allow an attacker to interfere with the program’s execution flow.

Affected Systems

Affected Apple macOS installations include versions released prior to macOS Sequoia 15.4, macOS Sonoma 14.7.5, and macOS Ventura 13.7.5. Apple has provided fixes in the update releases for these operating system families. Users running any earlier macOS build are vulnerable and should consider upgrading to the specified patched releases.

Risk and Exploitability

The CVSS score of 9.8 indicates a high severity of the issue. The EPSS score of less than 1% suggests that exploitation probability is currently low. The vulnerability is not listed in CISA’s KEV catalog, implying no public evidence of widespread exploitation. Based on the description, it is inferred that the likely attack vector is mounting a malicious SMB share, which could be performed remotely if the SMB service is exposed, or locally by an attacker with network access. The impact is purely availability (system termination), and no direct confidentiality or integrity compromise is described.

Affected Products

Default status is the baseline for the product, each version can override it (e.g. patched versions marked unaffected).

Vendor Product Default status Versions

Apple

macOS

affected

Version	Status	Constraints
`0`	affected	< 13.7.5
`0`	affected	< 14.7.5
`0`	affected	< 15.4

Configuration 1 [-]

OR	cpe:2.3:o:apple:macos::::::::
	cpe:2.3:o:apple:macos::::::::
	cpe:2.3:o:apple:macos::::::::

No data.

No data available yet.

Remediation

No solution or workaround provided in the CVE record.

OpenCVE Recommended Actions

Upgrade macOS to at least Sequoia 15.4, Sonoma 14.7.5, or Ventura 13.7.5, which contain the fix for the race condition.
Restrict SMB access by configuring the firewall or disabling SMB sharing until the update is installed.
Monitor system logs for repeated attempts to mount network shares and temporarily block offending IPs to reduce potential exploitation.

Generated by OpenCVE AI on April 28, 2026 at 19:04 UTC.

Tracking

Advisories

Source	ID	Title
EUVD	EUVD-2025-8921	A race condition was addressed with improved locking. This issue is fixed in macOS Ventura 13.7.5, macOS Sequoia 15.4, macOS Sonoma 14.7.5. Mounting a maliciously crafted SMB network share may lead to system termination.

Metrics

No CVSS v4.0

Attack Vector Network

Attack Complexity Low

Privileges Required None

Scope Unchanged

Confidentiality Impact High

Integrity Impact High

Availability Impact High

User Interaction None

No CVSS v3.0

No CVSS v2

This CVE is not in the KEV list.

Exploit prediction score: < 1% (0.774% probability within 30 days)

Exploitation none

Automatable yes

Technical Impact total

References

Link	Providers
http://seclists.org/fulldisclosure/2025/Apr/10
http://seclists.org/fulldisclosure/2025/Apr/8
http://seclists.org/fulldisclosure/2025/Apr/9
https://support.apple.com/en-us/122373
https://support.apple.com/en-us/122374
https://support.apple.com/en-us/122375

History

Apr 28, 2026 7:30 PM Title updated View changes

Type	Values Removed	Values Added
Title		Malicious SMB Share Causes System Termination via Race Condition in macOS

Apr 2, 2026 8:30 PM Description updated View changes

Type	Values Removed	Values Added
Description	A race condition was addressed with improved locking. This issue is fixed in macOS Ventura 13.7.5, macOS Sequoia 15.4, macOS Sonoma 14.7.5. Mounting a maliciously crafted SMB network share may lead to system termination.	A race condition was addressed with improved locking. This issue is fixed in macOS Sequoia 15.4, macOS Sonoma 14.7.5, macOS Ventura 13.7.5. Mounting a maliciously crafted SMB network share may lead to system termination.

Nov 3, 2025 10:30 PM Added references View changes

Type	Values Removed	Values Added
References		http://seclists.org/fulldisclosure/2025/Apr/10 http://seclists.org/fulldisclosure/2025/Apr/8 http://seclists.org/fulldisclosure/2025/Apr/9

Apr 7, 2025 2:45 PM First appearance in the feed. Affected versions updated. Affected vendors updated View changes

Type	Values Removed	Values Added
First Time appeared		Apple Apple macos
CPEs		cpe:2.3:o:apple:macos::::::::
Vendors & Products		Apple Apple macos

Apr 2, 2025 2:15 PM Scoring metrics updated View changes

Type	Values Removed	Values Added
Metrics		ssvc `{'options': {'Automatable': 'yes', 'Exploitation': 'none', 'Technical Impact': 'total'}, 'version': '2.0.3'}`

Apr 2, 2025 2:45 PM Weaknesses updated. Scoring metrics updated View changes

Type	Values Removed	Values Added
Weaknesses		CWE-362
Metrics		cvssV3_1 `{'score': 9.8, 'vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H'}`

Mar 31, 2025 10:45 PM Description updated. Added references View changes

Type	Values Removed	Values Added
Description		A race condition was addressed with improved locking. This issue is fixed in macOS Ventura 13.7.5, macOS Sequoia 15.4, macOS Sonoma 14.7.5. Mounting a maliciously crafted SMB network share may lead to system termination.
References		https://support.apple.com/en-us/122373 https://support.apple.com/en-us/122374 https://support.apple.com/en-us/122375