Skip to content
CVE PROGRAM SOURCE RECORD6.5 Medium

CVE-2025-4574

Crossbeam-channel: crossbeam-channel vulnerable to double free on drop

Description

In crossbeam-channel rust crate, the internal `Channel` type's `Drop` method has a race condition which could, in some circumstances, lead to a double-free that could result in memory corruption.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

crossbeam-channel

Default version status: unaffected

  • 0.5.12 to < 0.5.15affected

Red Hat Red Hat Directory Server 11

Default version status: unaffected

Red Hat Red Hat Directory Server 12

Default version status: unaffected

Red Hat Red Hat Enterprise Linux 10

Default version status: affected

Red Hat Red Hat Enterprise Linux 10

Default version status: affected

Red Hat Red Hat Enterprise Linux 10

Default version status: unaffected

Red Hat Red Hat Enterprise Linux 10

Default version status: affected

Red Hat Red Hat Enterprise Linux 10

Default version status: affected

Red Hat Red Hat Enterprise Linux 10

Default version status: affected

Red Hat Red Hat Enterprise Linux 10

Default version status: affected

Red Hat Red Hat Enterprise Linux 7

Default version status: affected

Red Hat Red Hat Enterprise Linux 7

Default version status: unaffected

Red Hat Red Hat Enterprise Linux 8

Default version status: unaffected

Red Hat Red Hat Enterprise Linux 8

Default version status: unaffected

Red Hat Red Hat Enterprise Linux 8

Default version status: affected

Red Hat Red Hat Enterprise Linux 8

Default version status: unaffected

Red Hat Red Hat Enterprise Linux 8

Default version status: unaffected

Red Hat Red Hat Enterprise Linux 8

Default version status: affected

Red Hat Red Hat Enterprise Linux 9

Default version status: affected

Red Hat Red Hat Enterprise Linux 9

Default version status: affected

Red Hat Red Hat Enterprise Linux 9

Default version status: unaffected

Red Hat Red Hat Enterprise Linux 9

Default version status: unaffected

Red Hat Red Hat Enterprise Linux 9

Default version status: affected

Red Hat Red Hat Enterprise Linux 9

Default version status: affected

Red Hat Red Hat Enterprise Linux 9

Default version status: affected

Red Hat Red Hat Enterprise Linux 9

Default version status: affected

Red Hat Red Hat Enterprise Linux 9

Default version status: affected

Red Hat Red Hat OpenShift AI (RHOAI)

Default version status: affected

Red Hat Red Hat OpenShift AI (RHOAI)

Default version status: affected

Red Hat Red Hat OpenShift Container Platform 4

Default version status: affected

Red Hat Red Hat OpenShift Container Platform 4

Default version status: unaffected

Red Hat Red Hat OpenShift Container Platform 4

Default version status: affected

Red Hat Red Hat OpenShift Container Platform 4

Default version status: unaffected

Red Hat Red Hat OpenShift Container Platform 4

Default version status: unaffected

Red Hat Red Hat Satellite 6

Default version status: affected

Red Hat Red Hat Satellite 6

Default version status: affected

Red Hat Red Hat Trusted Artifact Signer

Default version status: affected

Red Hat Red Hat Trusted Artifact Signer

Default version status: affected

Red Hat Red Hat Trusted Profile Analyzer

Default version status: affected

Red Hat Red Hat Trusted Profile Analyzer

Default version status: unaffected

References