CVE-2025-4574 — Double Free in Rust-crossbeam-channel

CWE-415 — Double Free8 documents6 sources
Severity
6.5MEDIUMNVD
EPSS
0.5%
top 34.97%
CISA KEV
Not in KEV
Exploit
No known exploits
Affected products
10
Debian Rust-crossbeam-channelMsrc Azl3 Kata-containers-cc 3.15.0.aks0-4 ON Azure Linux 3.0Msrc Azl3 Kata-containers-cc 3.15.0.aks0-5 ON Azure Linux 3.0+7 more
Timeline
PublishedMay 13

Description

In crossbeam-channel rust crate, the internal `Channel` type's `Drop` method has a race condition which could, in some circumstances, lead to a double-free that could result in memory corruption.

CVSS vector

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:LExploitability: 3.9 | Impact: 2.5

Affected Packages10 packages

▶debiandebian/rust-crossbeam-channel< rust-crossbeam-channel 0.5.15-1 (forky)

🔴Vulnerability Details

4
OSV
CVE-2025-4574: In crossbeam-channel rust crate, the internal `Channel` type's `Drop` method has a race condition which could, in some circumstances, lead to a double↗2025-05-13
▶
OSV
crossbeam-channel Vulnerable to Double Free on Drop↗2025-04-10
▶
GHSA
crossbeam-channel Vulnerable to Double Free on Drop↗2025-04-10
▶
OSV
crossbeam-channel: double free on Drop↗2025-04-08
▶

📋Vendor Advisories

3
Microsoft
Crossbeam-channel: crossbeam-channel vulnerable to double free on drop↗2025-05-13
▶
Red Hat
crossbeam-channel: crossbeam-channel Vulnerable to Double Free on Drop↗2025-04-10
▶
Debian
CVE-2025-4574: rust-crossbeam-channel - In crossbeam-channel rust crate, the internal `Channel` type's `Drop` method has...↗2025
▶