CVE-2020-36219

Name of the Vulnerable Software and Affected Versions atomic-option crate through 2020-10-31

Description The issue concerns the atomic-option crate, where AtomicOption<T> unconditionally implements Sync. This allows moving non-Sync types, such as Rc<T> or Arc<Cell<T>>, across thread boundaries, potentially leading to data races and undefined behavior. Additionally, it is possible to send non-Send types, like std::sync::MutexGuard, to other threads, resulting in undefined behavior.

Recommendations For the atomic-option crate through 2020-10-31, consider avoiding the use of AtomicOption<T> with non-Sync types to prevent data races and undefined behavior. As a temporary workaround, restrict the movement of non-Sync types across thread boundaries until a patch is available.