Race Condition in Google Chrome V8

Successful exploitation may allow a remote attacker to execute arbitrary code within the Chrome sandbox, typically in the renderer context, after a target visits a malicious or compromised web page. The race condition may also cause instability such as crashes or other unexpected behavior.

Until patching is completed, reduce exposure by limiting access to untrusted websites and web content, especially where arbitrary browsing is permitted. Enterprise defenders should monitor for abnormal Chrome behavior, renderer crashes, unusual child processes, process injection, suspicious outbound connections from browser processes, and unauthorized browser setting or extension changes as possible indicators of exploitation. These are compensating controls only and do not replace patching.

Update Google Chrome to version 139.0.7258.127 or later on Linux, and to the corresponding fixed 139.0.7258.127/.128 stable-channel builds referenced by Google for supported platforms. Chromium-based browsers should also be updated once they incorporate the upstream fix.