https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-06T16:44:49.933823+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/euvd-2026-70654 EUVD-2026-70654 2026-10-06T16:44:49.959019+00:00 EUVD-2026-70654 https://cve.radiocsirt.org/vuln/fkie_cve-2018-20996 fkie_cve-2018-20996 2026-10-06T16:44:49.959055+00:00

An issue was discovered in the crossbeam crate before 0.4.1 for Rust. There is a double free because of destructor mishandling.

 https://cve.radiocsirt.org/vuln/ghsa-c3cw-c387-pj65 GHSA-c3cw-c387-pj65 — Double free in crossbeam 2026-10-06T16:44:49.959085+00:00

Affected: crates.io: crossbeam

Even if an element is popped from a queue, crossbeam would run its destructor inside the epoch-based garbage collector. This is a source of double frees.

The flaw was corrected by wrapping elements inside queues in a ManuallyDrop.

 https://cve.radiocsirt.org/vuln/gsd-2018-20996 gsd-2018-20996 2026-10-06T16:44:49.959111+00:00 gsd-2018-20996 https://cve.radiocsirt.org/vuln/rustsec-2018-0009 RUSTSEC-2018-0009 — MsQueue and SegQueue suffer from double-free 2026-10-06T16:44:49.959123+00:00

Affected: crates.io: crossbeam

Even if an element is popped from a queue, crossbeam would run its destructor inside the epoch-based garbage collector. This is a source of double frees.

The flaw was corrected by wrapping elements inside queues in a `ManuallyDrop`.

Thanks to [@c0gent](https://github.com/c0gent) for reporting the issue.

 https://cve.radiocsirt.org/vuln/ubuntu-cve-2018-20996 UBUNTU-CVE-2018-20996 2026-10-06T16:44:49.959146+00:00

Affected: Ubuntu:20.04:LTS: rust-crossbeam-epoch, Ubuntu:22.04:LTS: rust-crossbeam-epoch, Ubuntu:24.04:LTS: rust-crossbeam-epoch, Ubuntu:25.10: rust-crossbeam-epoch, Ubuntu:26.04:LTS: rust-crossbeam-epoch

An issue was discovered in the crossbeam crate before 0.4.1 for Rust. There is a double free because of destructor mishandling.