{"id":"ghsa-ghsa-5wjr-9356-4wc8","seq":661326,"kind":"advisory","title":"Tokio: Race condition in `tokio::time::Interval`","url":"https://github.com/advisories/GHSA-5wjr-9356-4wc8","permalink":"https://vulnpulse.app/items/ghsa-ghsa-5wjr-9356-4wc8","summary":"影響: rust:tokio = 1.54.0 → 1.54.1\nOn the multi-threaded runtime, there is a race condition between Interval::poll_tick and the runtime's time driver. This affects Interval only. Sleep and Timeout are not affected. Details In Tokio v1.54.0, a race condition between tokio::time::Interval::poll_tick (including .tick().await) and the runtime time driver can drop an internal timer entry without synchronizing with the driver thread that is firing it. This causes a data race and use-after-free on the timer's waker and task state in sa…","severity":"medium","techs":["rust"],"cves":["CVE-2026-115567"],"tags":["GHSA-5wjr-9356-4wc8","tokio"],"source":{"id":"ghsa","name":"GitHub Advisory Database"},"published_at":"2026-10-23T20:54:00.000Z","fetched_at":"2026-10-24T04:50:51.468Z"}