CVE Vulnerabilities

CVE-2025-4574

Double Free

Published: May 13, 2025 | Modified: May 16, 2025
CVSS 3.x
N/A
Source:
NVD
CVSS 2.x
RedHat/V2
RedHat/V3
6.5 MODERATE
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:L
Ubuntu
MEDIUM

In crossbeam-channel rust crate, the internal Channel types Drop method has a race condition which could, in some circumstances, lead to a double-free that could result in memory corruption.

Weakness

The product calls free() twice on the same memory address, potentially leading to modification of unexpected memory locations.

Affected Software

Name Vendor Start Version End Version
Rust-crossbeam-channel Ubuntu focal *
Rust-crossbeam-channel Ubuntu upstream *

Potential Mitigations

References