Crossbeam-channel: crossbeam-channel vulnerable to double free on drop
Published May 13, 2025
6.3
MEDIUMCVSS 4.0
EPSS 0.54%
Description
In crossbeam-channel rust crate, the internal `Channel` type's `Drop` method has a race condition which could, in some circumstances, lead to a double-free that could result in memory corruption.
Affected products
Default status is the baseline for the product. Each version can override it (patched versions can be marked unaffected).
| Vendor | Product | Default status | Versions |
|---|---|---|---|
| Red Hat | Red Hat Enterprise Linux 10 | affected | |
| Red Hat | Red Hat Enterprise Linux 7 | affected | |
| Red Hat | Red Hat Enterprise Linux 8 | affected | |
| Red Hat | Red Hat Enterprise Linux 9 | affected | |
| Red Hat | Red Hat OpenShift AI (RHOAI) | affected | |
| Red Hat | Red Hat OpenShift Container Platform 4 | affected | |
| Red Hat | Red Hat Satellite 6 | affected | |
| Red Hat | Red Hat Trusted Artifact Signer | affected | |
| Red Hat | Red Hat Trusted Profile Analyzer | affected |
No data.
No data.
Red Hat Directory Server 11
redhat-ds:11/389-ds-base
Not affected
Red Hat Directory Server 12
redhat-ds:12/389-ds-base
Not affected
Red Hat Enterprise Linux 10
389-ds-base
Fix deferred
Red Hat Enterprise Linux 10
firefox
Fix deferred
Red Hat Enterprise Linux 10
gjs
Not affected
Red Hat Enterprise Linux 10
rust
Fix deferred
Red Hat Enterprise Linux 10
rust-afterburn
Fix deferred
Red Hat Enterprise Linux 10
thunderbird
Fix deferred
Red Hat Enterprise Linux 10
trustee-guest-components
Fix deferred
Red Hat Enterprise Linux 7
firefox
Fix deferred
Red Hat Enterprise Linux 7
thunderbird
Not affected
Red Hat Enterprise Linux 8
389-ds-base
Not affected
Red Hat Enterprise Linux 8
389-ds:1.4/389-ds-base
Not affected
Red Hat Enterprise Linux 8
firefox
Fix deferred
Red Hat Enterprise Linux 8
rpm-ostree
Not affected
Red Hat Enterprise Linux 8
rust-toolset:rhel8/rust
Not affected
Red Hat Enterprise Linux 8
thunderbird
Fix deferred
Red Hat Enterprise Linux 9
389-ds-base
Fix deferred
Red Hat Enterprise Linux 9
firefox
Fix deferred
Red Hat Enterprise Linux 9
librsvg2
Not affected
Red Hat Enterprise Linux 9
rpm-ostree
Not affected
Red Hat Enterprise Linux 9
rust
Fix deferred
Red Hat Enterprise Linux 9
rust-afterburn
Fix deferred
Red Hat Enterprise Linux 9
rust-coreos-installer
Fix deferred
Red Hat Enterprise Linux 9
thunderbird
Fix deferred
Red Hat Enterprise Linux 9
trustee-guest-components
Fix deferred
Red Hat OpenShift AI (RHOAI)
rhoai/odh-feast-operator-rhel8
Fix deferred
Red Hat OpenShift AI (RHOAI)
rhoai/odh-feature-server-rhel8
Fix deferred
Red Hat OpenShift Container Platform 4
conmon-rs
Fix deferred
Red Hat OpenShift Container Platform 4
coreos-installer
Not affected
Red Hat OpenShift Container Platform 4
kata-containers
Fix deferred
Red Hat OpenShift Container Platform 4
rpm-ostree
Not affected
Red Hat OpenShift Container Platform 4
rust-afterburn
Not affected
Red Hat Satellite 6
python-maturin
Fix deferred
Red Hat Satellite 6
python3.12-maturin
Fix deferred
Red Hat Trusted Artifact Signer
rhtas/tuffer-rhel9
Will not fix
Red Hat Trusted Artifact Signer
rhtas/tuftool-rhel9
Will not fix
Red Hat Trusted Profile Analyzer
rhtpa/rhtpa-trustification-service-rhel9
Not affected
Red Hat Trusted Profile Analyzer
rhtpa/rhtpa-trustification-service-rhel9
Will not fix
| Product | Package | State | Advisory |
|---|---|---|---|
| Red Hat Directory Server 11 | redhat-ds:11/389-ds-base | Not affected | n/a |
| Red Hat Directory Server 12 | redhat-ds:12/389-ds-base | Not affected | n/a |
| Red Hat Enterprise Linux 10 | 389-ds-base | Fix deferred | n/a |
| Red Hat Enterprise Linux 10 | firefox | Fix deferred | n/a |
| Red Hat Enterprise Linux 10 | gjs | Not affected | n/a |
| Red Hat Enterprise Linux 10 | rust | Fix deferred | n/a |
| Red Hat Enterprise Linux 10 | rust-afterburn | Fix deferred | n/a |
| Red Hat Enterprise Linux 10 | thunderbird | Fix deferred | n/a |
| Red Hat Enterprise Linux 10 | trustee-guest-components | Fix deferred | n/a |
| Red Hat Enterprise Linux 7 | firefox | Fix deferred | n/a |
| Red Hat Enterprise Linux 7 | thunderbird | Not affected | n/a |
| Red Hat Enterprise Linux 8 | 389-ds-base | Not affected | n/a |
| Red Hat Enterprise Linux 8 | 389-ds:1.4/389-ds-base | Not affected | n/a |
| Red Hat Enterprise Linux 8 | firefox | Fix deferred | n/a |
| Red Hat Enterprise Linux 8 | rpm-ostree | Not affected | n/a |
| Red Hat Enterprise Linux 8 | rust-toolset:rhel8/rust | Not affected | n/a |
| Red Hat Enterprise Linux 8 | thunderbird | Fix deferred | n/a |
| Red Hat Enterprise Linux 9 | 389-ds-base | Fix deferred | n/a |
| Red Hat Enterprise Linux 9 | firefox | Fix deferred | n/a |
| Red Hat Enterprise Linux 9 | librsvg2 | Not affected | n/a |
| Red Hat Enterprise Linux 9 | rpm-ostree | Not affected | n/a |
| Red Hat Enterprise Linux 9 | rust | Fix deferred | n/a |
| Red Hat Enterprise Linux 9 | rust-afterburn | Fix deferred | n/a |
| Red Hat Enterprise Linux 9 | rust-coreos-installer | Fix deferred | n/a |
| Red Hat Enterprise Linux 9 | thunderbird | Fix deferred | n/a |
| Red Hat Enterprise Linux 9 | trustee-guest-components | Fix deferred | n/a |
| Red Hat OpenShift AI (RHOAI) | rhoai/odh-feast-operator-rhel8 | Fix deferred | n/a |
| Red Hat OpenShift AI (RHOAI) | rhoai/odh-feature-server-rhel8 | Fix deferred | n/a |
| Red Hat OpenShift Container Platform 4 | conmon-rs | Fix deferred | n/a |
| Red Hat OpenShift Container Platform 4 | coreos-installer | Not affected | n/a |
| Red Hat OpenShift Container Platform 4 | kata-containers | Fix deferred | n/a |
| Red Hat OpenShift Container Platform 4 | rpm-ostree | Not affected | n/a |
| Red Hat OpenShift Container Platform 4 | rust-afterburn | Not affected | n/a |
| Red Hat Satellite 6 | python-maturin | Fix deferred | n/a |
| Red Hat Satellite 6 | python3.12-maturin | Fix deferred | n/a |
| Red Hat Trusted Artifact Signer | rhtas/tuffer-rhel9 | Will not fix | n/a |
| Red Hat Trusted Artifact Signer | rhtas/tuftool-rhel9 | Will not fix | n/a |
| Red Hat Trusted Profile Analyzer | rhtpa/rhtpa-trustification-service-rhel9 | Not affected | n/a |
| Red Hat Trusted Profile Analyzer | rhtpa/rhtpa-trustification-service-rhel9 | Will not fix | n/a |
No package ranges for this CVE.
Remediation
Vendor solution
Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base or stability.
Red Hat mitigation
Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base or stability.
References (8)
- https://access.redhat.com/security/cve/CVE-2025-4574 vdb-entryx_refsource_REDHATVendor Advisory
- https://bugzilla.redhat.com/show_bug.cgi?id=2358890 issue-trackingx_refsource_REDHATIssue Tracking
- https://euvd.enisa.europa.eu/vulnerability/EUVD-2025-14635 Advisory
- https://github.com/advisories/GHSA-pg9f-39pc-qf8g Advisory
- https://github.com/crossbeam-rs/crossbeam/pull/1187
- https://nvd.nist.gov/vuln/detail/CVE-2025-4574
- https://rustsec.org/advisories/RUSTSEC-2025-0024.html
- https://www.cve.org/CVERecord?id=CVE-2025-4574
| Link | Providers | Tags |
|---|---|---|
| https://access.redhat.com/security/cve/CVE-2025-4574 | vdb-entryx_refsource_REDHATVendor Advisory | |
| https://bugzilla.redhat.com/show_bug.cgi?id=2358890 | issue-trackingx_refsource_REDHATIssue Tracking | |
| https://euvd.enisa.europa.eu/vulnerability/EUVD-2025-14635 | Advisory | |
| https://github.com/advisories/GHSA-pg9f-39pc-qf8g | Advisory | |
| https://github.com/crossbeam-rs/crossbeam/pull/1187 | ||
| https://nvd.nist.gov/vuln/detail/CVE-2025-4574 | ||
| https://rustsec.org/advisories/RUSTSEC-2025-0024.html | ||
| https://www.cve.org/CVERecord?id=CVE-2025-4574 |
Change history (0)
No recorded changes yet.
CVE.org / MITRE
CISA Vulnrichment
GitHub