## Tokio: Race condition in `tokio::time::Interval`

- 種別: advisory
- 重大度: medium
- 関連技術: rust
- CVE: CVE-2026-115567
- 公開日時: 2026-10-23T20:54:00.000Z
- 情報源: GitHub Advisory Database (https://github.com/advisories/GHSA-5wjr-9356-4wc8)
- パーマリンク: https://vulnpulse.app/items/ghsa-ghsa-5wjr-9356-4wc8

影響: rust:tokio = 1.54.0 → 1.54.1
On the multi-threaded runtime, there is a race condition between Interval::poll_tick and the runtime's time driver. This affects Interval only. Sleep and Timeout are not affected. Details In Tokio v1.54.0, a race condition between tokio::time::Interval::poll_tick (including .tick().await) and the runtime time driver can drop an internal timer entry without synchronizing with the driver thread that is firing it. This causes a data race and use-after-free on the timer's waker and task state in sa…