chiprook
← Software
SoftwareOctober 14, 2026, 17:27

Rust borrow checker unsoundness lets references escape 'static bound after 11 years

Issue #164250 on the rust-lang tracker reports an unsoundness in the borrow checker: a short-lived reference escapes a T: 'static bound via field assignment after construction and is read after its stack slot is freed. It reproduces on stable and nightly, with variants compiling since 1.4 and 1.18.0 (2017). Severity was downgraded from P-critical to P-high because the exploit requires an intentionally malicious Drop implementation.

Rust borrow checker unsoundness lets references escape 'static bound after 11 years
#Rust
Read next
Software

Two Rust borrow checker soundness bugs let unsafe-free code compile

Software

systemd 262 released with static PID 1, Intel TDX and TPM hardening

Software

Truecaller launches Scam Checker to flag scam links and numbers on the open web

Software

Minecraft 26.3 Update Wilderness Bound is Now Live, Here’s What’s New