https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Tue, 06 Oct 2026 09:34:24 +0000 https://cve.radiocsirt.org/vuln/cve-2022-23639 <p><strong>Affected:</strong> crossbeam-rs crossbeam</p> <p>crossbeam-utils provides atomics, synchronization primitives, scoped threads, and other utilities for concurrent programming in Rust. crossbeam-utils prior to version 0.8.7 incorrectly assumed that the alignment of `{i,u}64` was always the same as `Atomic{I,U}64`. However, the alignment of `{i,u}64` on a 32-bit target can be smaller than `Atomic{I,U}64`. This can cause unaligned memory accesses and data race. Crates using `fetch_*` methods with `AtomicCell&lt;{i,u}64&gt;` are affected by this issue. 32-bit targets without `Atomic{I,U}64` and 64-bit targets are not affected by this issue. This has been fixed in crossbeam-utils 0.8.7. There are currently no known workarounds.</p> <p><strong>Affected:</strong> crossbeam-rs crossbeam</p> <p>crossbeam-utils provides atomics, synchronization primitives, scoped threads, and other utilities for concurrent programming in Rust. crossbeam-utils prior to version 0.8.7 incorrectly assumed that the alignment of `{i,u}64` was always the same as `Atomic{I,U}64`. However, the alignment of `{i,u}64` on a 32-bit target can be smaller than `Atomic{I,U}64`. This can cause unaligned memory accesses and data race. Crates using `fetch_*` methods with `AtomicCell&lt;{i,u}64&gt;` are affected by this issue. 32-bit targets without `Atomic{I,U}64` and 64-bit targets are not affected by this issue. This has been fixed in crossbeam-utils 0.8.7. There are currently no known workarounds.</p> https://cve.radiocsirt.org/vuln/cve-2022-23639 https://cve.radiocsirt.org/vuln/ghsa-qc84-gqf4-9926 <p><strong>Affected:</strong> crates.io: crossbeam-utils</p> <p>### Impact</p> <p>The affected versions of this crate incorrectly assumed that the alignment of `{i,u}64` was always the same as `Atomic{I,U}64`.</p> <p>However, the alignment of `{i,u}64` on a 32-bit target can be smaller than `Atomic{I,U}64`.</p> <p>This can cause the following problems:</p> <p>- Unaligned memory accesses - Data race</p> <p>Crates using `fetch_*` methods with `AtomicCell&lt;{i,u}64&gt;` are affected by this issue.</p> <p>32-bit targets without `Atomic{I,U}64` and 64-bit targets are not affected by this issue. 32-bit targets with `Atomic{I,U}64` and `{i,u}64` have the same alignment are also not affected by this issue.</p> <p>The following is a complete list of the builtin targets that may be affected. (last update: nightly-2022-02-11)</p> <p>- armv7-apple-ios (tier 3) - armv7s-apple-ios (tier 3) - i386-apple-ios (tier 3) - i586-unknown-linux-gnu - i586-unknown-linux-musl - i686-apple-darwin (tier 3) - i686-linux-android - i686-unknown-freebsd - i686-unknown-haiku (tier 3) - i686-unknown-linux-gnu - i686-unknown-linux-musl - i686-unknown-netbsd (tier 3) - i686-unknown-openbsd (tier 3) - i686-wrs-vxworks (tier 3)</p> <p>([script to get list](https://gist.github.com/taiki-e/3c7891e8c5f5e0cbcb44d7396aabfe10))</p> <p>### Patches</p> <p>This has been fixed in crossbeam-utils 0.8.7.</p> <p>Affected 0.8.x releases have been yanked.</p> <p>### References</p> <p>https://github.com/crossbeam-rs/crossbeam/pull/781</p> <p>### License</p> <p>This advisory is in the public domain.</p> <p><strong>Affected:</strong> crates.io: crossbeam-utils</p> <p>### Impact</p> <p>The affected versions of this crate incorrectly assumed that the alignment of `{i,u}64` was always the same as `Atomic{I,U}64`.</p> <p>However, the alignment of `{i,u}64` on a 32-bit target can be smaller than `Atomic{I,U}64`.</p> <p>This can cause the following problems:</p> <p>- Unaligned memory accesses - Data race</p> <p>Crates using `fetch_*` methods with `AtomicCell&lt;{i,u}64&gt;` are affected by this issue.</p> <p>32-bit targets without `Atomic{I,U}64` and 64-bit targets are not affected by this issue. 32-bit targets with `Atomic{I,U}64` and `{i,u}64` have the same alignment are also not affected by this issue.</p> <p>The following is a complete list of the builtin targets that may be affected. (last update: nightly-2022-02-11)</p> <p>- armv7-apple-ios (tier 3) - armv7s-apple-ios (tier 3) - i386-apple-ios (tier 3) - i586-unknown-linux-gnu - i586-unknown-linux-musl - i686-apple-darwin (tier 3) - i686-linux-android - i686-unknown-freebsd - i686-unknown-haiku (tier 3) - i686-unknown-linux-gnu - i686-unknown-linux-musl - i686-unknown-netbsd (tier 3) - i686-unknown-openbsd (tier 3) - i686-wrs-vxworks (tier 3)</p> <p>([script to get list](https://gist.github.com/taiki-e/3c7891e8c5f5e0cbcb44d7396aabfe10))</p> <p>### Patches</p> <p>This has been fixed in crossbeam-utils 0.8.7.</p> <p>Affected 0.8.x releases have been yanked.</p> <p>### References</p> <p>https://github.com/crossbeam-rs/crossbeam/pull/781</p> <p>### License</p> <p>This advisory is in the public domain.</p> https://cve.radiocsirt.org/vuln/ghsa-qc84-gqf4-9926