GHSA-jh2g-xhqq-x4w9 – rcu_cell

Package

Manager: cargo
Name: rcu_cell
Vulnerable Version: <0

Severity

Level: Medium

CVSS v3.1: N/A

CVSS v4.0: N/A

EPSS: N/A pctlN/A

Details

Send/Sync bound needed on T for Send/Sync impl of RcuCell<T> Affected versions of this crate unconditionally implement Send/Sync for `RcuCell<T>`. This allows users to send `T: !Send` to other threads (while `T` enclosed within `RcuCell<T>`), and allows users to concurrently access `T: !Sync` by using the APIs of `RcuCell<T>` that provide access to `&T`. This can result in memory corruption caused by data races.

Metadata

Created: 2021-08-25T21:00:07Z
Modified: 2021-08-24T17:52:52Z
Source: https://github.com/github/advisory-database/blob/main/advisories/github-reviewed/2021/08/GHSA-jh2g-xhqq-x4w9/GHSA-jh2g-xhqq-x4w9.json
CWE IDs: ["CWE-362"]
Alternative ID: N/A
Finding: N/A
Auto approve: 0