Vulnerability feed
CVE and vendor PSIRT advisories from 13 sources, last 30 days. Updated hourly, last run
| Expand | Severity |
Score |
Advisory |
Title |
Source |
Flags |
Published |
|---|---|---|---|---|---|---|---|
| Medium | 5.8 | CVE-2026-115567 |
Tokio is a runtime for writing applications with Rust
tokio-rs, Tokiotokio-rs tokio, Tokio
|
NVD | |||
|
CVE-2026-115567Tokio is a runtime for writing applications with Rust
Executive summaryThis advisory is a NIST NVD entry for CVE-2026-115567 and describes a code change to the Tokio runtime for Rust, which is a library for writing asynchronous applications. The advisory text does not state the severity, a CVSS score, or the impact of the change, and it does not name a fixed release. The vendor's recommended action is not stated in the text provided. Technical summaryThe text shows a diff to Tokio's timer code that changes how timer entries hold a reference to the runtime handle, moving the handle into TimerEntry and adding a drop implementation that cancels the entry. It does not state the vulnerability class, the attack vector or preconditions, or any CVE description. Affected versions, fixed versions, workarounds, and detection guidance are not stated in the advisory. Exploitation status and a CVSS score are also not stated. Summaries are generated by AI from the linked advisory text. Confirm versions and fixes at the source. Summarized from github.com/tokio-rs/tokio/commit/2b4eba…f3e5f4a97ff4f6fa28d0 Impact if exploitedConfidentialityNone IntegrityLow AvailabilityHigh
How it is exploited
CVSS:4.0/AV:L/AC:H/AT:P/PR:L/UI:N/VC:N/VI:L/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X Affects
NIST National Vulnerability DatabasePublished
Read the advisory
|
|||||||