Debian Rust Security Tracker 🩺🦀

RUSTSEC-2026-0204: Invalid pointer dereference in `fmt::Pointer` impl for `Atomic` and `Shared` when the underlying pointer is invalid

2 affected
Crate
crossbeam-epoch
Patched Versions
>=0.9.20
Debian Version
0.9.21-1
Debian Bugs
—
Issued
2026-07-06
Aliases
—
Patched:Affected

Affected versions of fmt::Display dereference the underlying pointer. This causes a invalid pointer dereference e.g., when a pointer created with Atomic::null or Shared::null. fmt::Debug impls and pre-0.9 fmt::Display impls, which do not dereference pointers, are not affected by this issue.

Affected Packages

crossbeam-epoch 0.9.18 loggerhead 3.0.1+dfsg-2+b2
crossbeam-epoch 0.9.18 sdml 0.3.2+20250310-7+b1