Skip to content
OpenAdvisories
Medium · 5.9 CVE-2021-38191 EUVD-2021-1512GHSA-2grh-hm3w-w7hvRUSTSEC-2021-0072

Race condition in tokio

Published Aug 8, 2021 · Updated Aug 4, 2024 · Assigned by mitre

Description

An issue was discovered in the tokio crate before 1.8.1 for Rust. Upon a JoinHandle::abort, a Task may be dropped in the wrong thread.

Affected packages

EcosystemPackageAffectedFixedRecord
crates.io tokio >= 1.8.0, < 1.8.1 1.8.1 GHSA-2grh-hm3w-w7hv
crates.io tokio >= 1.7.0, < 1.7.2 1.7.2 GHSA-2grh-hm3w-w7hv
crates.io tokio >= 1.6.0, < 1.6.3 1.6.3 GHSA-2grh-hm3w-w7hv
crates.io tokio >= 0.3.0, < 1.5.1 1.5.1 GHSA-2grh-hm3w-w7hv
crates.io tokio >= 0.3.0, < 1.5.1 · >= 1.6.0, < 1.6.3 · >= 1.7.0, < 1.7.2 · >= 1.8.0, < 1.8.1 1.5.1, 1.6.3, 1.7.2, 1.8.1 RUSTSEC-2021-0072

References