PT-2025-21128 · Unknown+1 · Crossbeam-Channel+1

Published 2025-04-08 · Updated 2026-01-19 · CVE-2025-4574

Positive Technologies (AI Summary)

CVSS v3.1

6.5

Medium

Base vector

AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:L

Name of the Vulnerable Software and Affected Versions: crossbeam-channel (affected versions not specified)

Description: The issue is related to a race condition in the internal Channel type's Drop method in the crossbeam-channel rust crate. This could lead to a double-free, resulting in memory corruption.

Recommendations: At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Double Free

Weakness Enumeration

CWE-415

Related Identifiers

AZL-61830

AZL-61835

AZL-61839

AZL-61845

AZL-61848

AZL-61855

BDU:2025-10949

CVE-2025-4574

GHSA-PG9F-39PC-QF8G

GHSA-W443-5H3J-JQCP

OPENSUSE-SU-2025:15550-1

OPENSUSE-SU-2025:15551-1

OPENSUSE-SU-2025_01591-1

OPENSUSE-SU-2026:20060-1

RUSTSEC-2025-0024

SUSE-SU-2025:01591-1

SUSE-SU-2026:20096-1

TROVE-2025-013

Affected Products

Suse

Crossbeam-Channel

References · 47

• https://osv.dev/vulnerability/AZL-61835 · Vendor Advisory
• https://cve.org/CVERecord?id=CVE-2025-4574 · Security Note
• https://bdu.fstec.ru/vul/2025-10949 · Security Note
• https://osv.dev/vulnerability/SUSE-SU-2026:20096-1 · Vendor Advisory
• https://ubuntu.com/security/CVE-2025-4574 · Vendor Advisory
• https://security-tracker.debian.org/tracker/CVE-2025-4574 · Vendor Advisory
• https://osv.dev/vulnerability/openSUSE-SU-2025:15550-1 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2025-4574 · Security Note
• https://osv.dev/vulnerability/openSUSE-SU-2025:15551-1 · Vendor Advisory
• https://osv.dev/vulnerability/AZL-61845 · Vendor Advisory
• https://osv.dev/vulnerability/SUSE-SU-2025:01591-1 · Vendor Advisory
• https://osv.dev/vulnerability/AZL-61839 · Vendor Advisory
• https://osv.dev/vulnerability/openSUSE-SU-2026:20060-1 · Vendor Advisory
• https://osv.dev/vulnerability/RUSTSEC-2025-0024 · Vendor Advisory
• https://osv.dev/vulnerability/AZL-61855 · Vendor Advisory