CVE-2020-35910: Data races in lock_api

August 25, 2021 (updated May 23, 2025)

An issue was discovered in the lock_api crate before 0.4.2 for Rust. A data race can occur because of MappedMutexGuard unsoundness.

References

github.com/Amanieu/parking_lot
github.com/Amanieu/parking_lot/commit/7de94f95f519d8281cb48457964065b463d26736
github.com/Amanieu/parking_lot/pull/262
github.com/advisories/GHSA-ppj3-7jw3-8vc4
nvd.nist.gov/vuln/detail/CVE-2020-35910
rustsec.org/advisories/RUSTSEC-2020-0070.html

Code Behaviors & Features

Detect and mitigate CVE-2020-35910 with GitLab Dependency Scanning

Secure your software supply chain by verifying that all open source dependencies used in your projects contain no disclosed vulnerabilities. Dependency Scanning using SBOM also detects vulnerabilities from proprietary advisories that this site does not include. Learn more about Dependency Scanning using SBOM →