CVE-2025-4574

In crossbeam-channel rust crate, the internal Channel type's Drop method has a race condition which could, in some circumstances, lead to a double-free that could result in memory corruption.

References

Affected packages

Debian:13 / rust-crossbeam-channel

Package

Name: rust-crossbeam-channel
Purl: pkg:deb/debian/rust-crossbeam-channel?arch=source

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0Unknown introduced version / All previous versions are affected

Fixed

0.5.15-1

Affected versions

0.*

0.5.6-1

0.5.8-1

0.5.11-1

0.5.14-1

Ecosystem specific

{
    "urgency": "not yet assigned"
}