Your submission was sent successfully! Close

CVE-2022-23639

Published: 15 February 2022

crossbeam-utils provides atomics, synchronization primitives, scoped threads, and other utilities for concurrent programming in Rust. crossbeam-utils prior to version 0.8.7 incorrectly assumed that the alignment of `{i,u}64` was always the same as `Atomic{I,U}64`. However, the alignment of `{i,u}64` on a 32-bit target can be smaller than `Atomic{I,U}64`. This can cause unaligned memory accesses and data race. Crates using `fetch_*` methods with `AtomicCell<{i,u}64>` are affected by this issue. 32-bit targets without `Atomic{I,U}64` and 64-bit targets are not affected by this issue. This has been fixed in crossbeam-utils 0.8.7. There are currently no known workarounds.

Priority

Medium

CVSS 3 base score: 8.1

Status

Package Release Status
cargo
Launchpad, Ubuntu, Debian
bionic Needs triage

focal Needs triage

impish Needs triage

jammy Needs triage

trusty Ignored
(out of standard support)
upstream Needs triage

xenial Ignored
(out of standard support)
firefox
Launchpad, Ubuntu, Debian
bionic Needs triage

focal Needs triage

impish Needs triage

jammy
Released (1:1snap1-0ubuntu1)
trusty Does not exist

upstream Needs triage

xenial Needs triage

librsvg
Launchpad, Ubuntu, Debian
bionic Not vulnerable
(code not present)
focal Not vulnerable
(2.48.9-1ubuntu0.20.04.1)
impish Not vulnerable
(2.50.7+dfsg-1)
jammy Not vulnerable
(2.52.5+dfsg-3)
trusty Ignored
(out of standard support)
upstream Needs triage

xenial Not vulnerable
(code not present)
mozjs38
Launchpad, Ubuntu, Debian
bionic Needs triage

focal Does not exist

impish Does not exist

jammy Does not exist

trusty Does not exist

upstream Needs triage

xenial Does not exist

mozjs52
Launchpad, Ubuntu, Debian
bionic Needs triage

focal Needs triage

impish Does not exist

jammy Does not exist

trusty Does not exist

upstream Needs triage

xenial Does not exist

mozjs68
Launchpad, Ubuntu, Debian
bionic Does not exist

focal Needs triage

impish Does not exist

jammy Does not exist

trusty Does not exist

upstream Needs triage

xenial Does not exist

mozjs78
Launchpad, Ubuntu, Debian
bionic Does not exist

focal Does not exist

impish Needs triage

jammy Needs triage

trusty Does not exist

upstream Needs triage

xenial Does not exist

rust-crossbeam-utils
Launchpad, Ubuntu, Debian
bionic Does not exist

focal Needed

impish Needed

jammy Needed

trusty Does not exist

upstream
Released (0.8.7)
xenial Does not exist

rust-crossbeam-utils-0.7
Launchpad, Ubuntu, Debian
bionic Does not exist

focal Does not exist

impish Does not exist

jammy Needed

trusty Does not exist

upstream Needs triage

xenial Does not exist

rustc
Launchpad, Ubuntu, Debian
bionic Needed

focal Needed

impish Needed

jammy Needs triage

trusty Needs triage

upstream Needs triage

xenial Ignored
(out of standard support)
thunderbird
Launchpad, Ubuntu, Debian
bionic Needs triage

focal Needs triage

impish Needs triage

jammy Needs triage

trusty Does not exist

upstream Needs triage

xenial Needs triage

Notes

AuthorNote
tyhicks
mozjs contains a copy of the SpiderMonkey JavaScript engine
sbeattie
rustc 1.58.1+dfsg1~ubuntu1-0ubuntu1/jammy fixed this in the
0.8.5 embedded code copy, but not the 0.7.2 copy.
mdeslaur
librsvg doesn't appear to use AtomicCell

References