GHSA-9hpw-r23r-xgm5
Data race in `Iter` and `IterMut`
GHSA-9hpw-r23r-xgm5 is a vulnerability with no CVSS score yet in thread_local, published January 23, 2022. No source lists public exploit code. Fixed in thread_local 1.1.4.
- Severity
- UnratedNo CVSS score yet
- Exploit chance
- UnscoredNo EPSS score yet
- Exploitation
- None knownNot on CISA’s or ENISA’s lists
- Fixed in
1.1.4thread_local +1 more
Description
In the affected version of this crate, {Iter, IterMut}::next used a weaker memory ordering when loading values than what was required, exposing a potential data race
when iterating over a ThreadLocal's values.
Crates using Iter::next, or IterMut::next are affected by this issue.
Affected packages
| Package | Affected | Fixed |
|---|---|---|
thread_localcrates.io | before 1.1.4 | 1.1.4 |
thread_localcrates.io | 0.0.0-0 up to 1.1.4 | 1.1.4 |
What each source reports
GitHub AdvisoriesNo score
Data race in `Iter` and `IterMut`
In the affected version of this crate, {Iter, IterMut}::next used a weaker memory ordering when loading values than what was required, exposing a potential data race
when iterating over a ThreadLocal's values.
Crates using Iter::next, or IterMut::next are affected by this issue.
- Record
GHSA-9hpw-r23r-xgm5- Weakness
- CWE-362
- Updated
- 2026-11-02
OSVNo score
Data race in `Iter` and `IterMut`
In the affected version of this crate, {Iter, IterMut}::next used a weaker memory ordering when loading values than what was required, exposing a potential data race
when iterating over a ThreadLocal's values.
Crates using Iter::next, or IterMut::next are affected by this issue.
- Record
GHSA-9hpw-r23r-xgm5- Weakness
- CWE-362
- Updated
- 2026-11-02
OSVRUSTSEC-2022-0006No score
Data race in `Iter` and `IterMut`
In the affected version of this crate, {Iter, IterMut}::next used a weaker memory ordering when loading values than what was required, exposing a potential data race
when iterating over a ThreadLocal's values.
Crates using Iter::next, or IterMut::next are affected by this issue.
- Record
RUSTSEC-2022-0006- Updated
- 2026-11-02
History
| Recorded | Changed | Sources |
|---|---|---|
| first indexed | GitHub Advisories, OSV |
Dates are when Every CVE recorded each change. Upstream dates may differ.