CVE-2026-115567

Public on 2026-10-23
Modified on 2026-10-28
Description
Tokio is a runtime for writing applications with Rust. In 1.54.0, a race condition between tokio::time::Interval::poll_tick (including .tick().await) and the multi-threaded runtime's time driver could drop an internal timer entry without synchronizing with the driver thread that was firing it. The race caused a use-after-free on the timer's waker and task state in safe Rust, which could produce assertion panics, task reference-count corruption, or heap memory corruption. This issue is fixed in 1.54.1.
Severity
Medium severity
Medium
See what this means
CVSS v3 Base Score
5.3
See breakdown

Affected Packages

Platform Package Release Date Advisory Status
Amazon Linux 2027 Preview aws-nitro-enclaves-cli Not Affected
Amazon Linux 2023 aws-workload-credentials-provider Not Affected
Amazon Linux 2023 glycin Not Affected
Amazon Linux 2027 Preview glycin Not Affected
Amazon Linux 2023 mount-s3 Not Affected
Amazon Linux 2027 Preview mount-s3 Not Affected
Amazon Linux 2023 network-flow-monitor-agent Not Affected
Amazon Linux 2027 Preview network-flow-monitor-agent Not Affected
Amazon Linux 2 - Core rust Not Affected
Amazon Linux 2023 rust-below Not Affected

CVSS Scores

Score Type Score Vector
Amazon Linux CVSSv3 5.3 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:L/A:H