CVE-2020-36463

Name of the Vulnerable Software and Affected Versions multiqueue crate through 2020-12-25

Description An issue in the multiqueue crate allows unconditional implementations of Send for types used in queue implementations, such as InnerSend<RW, T>, InnerRecv<RW, T>, FutInnerSend<RW, T>, and FutInnerRecv<RW, T>. This can lead to users sending non-Send types to other threads, resulting in data race bugs or other undefined behavior.

Recommendations For multiqueue crate through 2020-12-25, consider restricting the use of the affected types (InnerSend<RW, T>, InnerRecv<RW, T>, FutInnerSend<RW, T>, FutInnerRecv<RW, T>) to prevent sending non-Send types to other threads until a fix is available. At the moment, there is no information about a newer version that contains a fix for this vulnerability.