CVE-2025-4574
In crossbeam-channel rust crate, the internal `Channel` type's `Drop` method has a race condition which could, in some circumstances, lead to a double-free that could result in memory corruption.
- Score
- CVSS 3.1 6.5 Medium
- Status
- Deferred - secalert@redhat.com
- Published
- 2025-05-13
- Last modified
- 2026-06-30
- Weaknesses
- CWE-415
Affected products
- Directory Server (Redhat)
- Enterprise Linux (Redhat)
- Openshift (Redhat)
- Openshift Ai (Redhat)
- Satellite (Redhat)
- Trusted Artifact Signer (Redhat)
- Trusted Profile Analyzer (Redhat)
References
- https://access.redhat.com/security/cve/CVE-2025-4574
- https://bugzilla.redhat.com/show_bug.cgi?id=2358890
- https://github.com/advisories/GHSA-pg9f-39pc-qf8g
- https://github.com/crossbeam-rs/crossbeam/pull/1187
