Tokio: Race condition in `tokio::time::Interval`

影響: rust:tokio = 1.54.0 → 1.54.1

On the multi-threaded runtime, there is a race condition between Interval::poll_tick and the runtime's time driver. This affects Interval only. Sleep and Timeout are not affected. Details In Tokio v1.54.0, a race condition between tokio::time::Interval::poll_tick (including .tick().await) and the runtime time driver can drop an internal timer entry without synchronizing with the driver thread that is firing it. This causes a data race and use-after-free on the timer's waker and task state in sa…

在 GitHub Advisory Database 阅读

2026/10/24 05:54，GitHub Advisory Database 发布了“Tokio: Race condition in `tokio::time::Interval`”（类型：漏洞公告）。严重程度为“中危”（medium）。相关技术：Rust。CVE：CVE-2026-115567。