CVE-2021-31162

Publication date 14 April 2021

Last updated 26 August 2025


Ubuntu priority

Cvss 3 Severity Score

9.8 · Critical

Score breakdown

Description

In the standard library in Rust before 1.52.0, a double free can occur in the Vec::from_iter function if freeing the element panics.

Status

Package Ubuntu Release Status
rustc 26.04 LTS resolute Not in release
25.10 questing Not in release
25.04 plucky Not in release
24.10 oracular Not in release
24.04 LTS noble
Not affected
23.10 mantic
Not affected
23.04 lunar
Not affected
22.10 kinetic Ignored end of life, was needed
22.04 LTS jammy
Fixed 1.53.0+dfsg1+llvm-4ubuntu1
21.10 impish Ignored end of life
21.04 hirsute Ignored end of life
20.10 groovy Ignored end of life
20.04 LTS focal
Fixed 1.53.0+dfsg1+llvm-4ubuntu1~20.04.1
18.04 LTS bionic
Not affected
16.04 LTS xenial Ignored end of standard support, was needed
14.04 LTS trusty
Vulnerable

Severity score breakdown

CVSS version: CVSS v3.0

Base score 9.8 · Critical

Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H


Access our resources on patching vulnerabilities