PT-2021-24395 · Unordered+1 · Unordered+1

Published

2021-08-25

·

Updated

2021-08-25

None

No severity ratings or metrics are available. When they are, we'll update the corresponding info on the page.
Name of the Vulnerable Software and Affected Versions: crate versions prior to the fix in commits 92f40b4 and 6a6c367
Description: The issue allows sending non-Send types to other threads and concurrently accessing non-Sync types from multiple threads, which can result in a data race and memory corruption when types that provide internal mutability without synchronization are contained within PinSlab<T> or Unordered<T, S> and accessed concurrently from multiple threads.
Recommendations: For versions prior to the fix in commits 92f40b4 and 6a6c367, update to a version that includes these commits to ensure that PinSlab<T> and Unordered<T, S> only implement Send and Sync when the type T also implements Send and Sync, respectively. As a temporary workaround, consider avoiding concurrent access to PinSlab<T> and Unordered<T, S> instances that contain non-Send or non-Sync types.

Race Condition

Found an issue in the description? Have something to add? Feel free to write us 👾

Weakness Enumeration

Related Identifiers

GHSA-7MG7-M5C3-3HQJ

Affected Products

Pinslab
Unordered