MEDIUM

GHSA-rwf4-gx62-rqfw

`MsQueue` `push`/`pop` use the wrong orderings

Details

Affected versions of this crate use orderings which are too weak to support this data structure. It is likely this has caused memory corruption in the wild: <https://github.com/crossbeam-rs/crossbeam/issues/97#issuecomment-412785919>.

Are you affected?

Enter the version of the package you're using.

Affected packages

crates.io/crossbeam

Introduced in: 0Fixed in: 0.3.0

Upgrade crossbeam to 0.3.0 or newer (ecosystem crates.io).

References

https://github.com/crossbeam-rs/crossbeam/issues/97#issuecomment-412785919[WEB]
https://github.com/crossbeam-rs/crossbeam/pull/98[WEB]
https://github.com/crossbeam-rs/crossbeam[PACKAGE]
https://rustsec.org/advisories/RUSTSEC-2022-0029.html[WEB]