Debian Rust Security Tracker 🩺🦀

RUSTSEC-2026-0204: Invalid pointer dereference in `fmt::Pointer` impl for `Atomic` and `Shared` when the underlying pointer is invalid

5 affected
Crate
crossbeam-epoch
Patched Versions
>=0.9.20
Debian Version
0.9.20-1
Debian Bugs
—
Issued
2026-07-06
Aliases
—
Patched:Affected

Affected versions of fmt::Display dereference the underlying pointer. This causes a invalid pointer dereference e.g., when a pointer created with Atomic::null or Shared::null. fmt::Debug impls and pre-0.9 fmt::Display impls, which do not dereference pointers, are not affected by this issue.

Affected Packages

crossbeam-epoch 0.9.18 debian-lsp 0.1.8-2
crossbeam-epoch 0.9.18 loggerhead 3.0.1+dfsg-2+b2
crossbeam-epoch 0.9.18 nethsm-pkcs11 2.0.0-2+b2
crossbeam-epoch 0.9.18 sdml 0.3.2+20250310-7+b1
crossbeam-epoch 0.9.18 silver-platter 0.8.4-2