RUSTSEC-2026-0204: Invalid pointer dereference in `fmt::Pointer` impl for `Atomic` and `Shared` when the underlying pointer is invalid

> Invalid pointer dereference in `fmt::Pointer` impl for `Atomic` and `Shared` when the underlying pointer is invalid

| Details | |
| ------------------- | ---------------------------------------------- |
| Package | `crossbeam-epoch` |
| Version | `0.9.18` |
| URL | [https://github.com/crossbeam-rs/crossbeam/pull/1276](https://github.com/crossbeam-rs/crossbeam/pull/1276) |
| Date | 2026-07-06 |
| Patched versions | `>=0.9.20` |
| Unaffected versions | `<0.9.0` |

Affected versions of `fmt::Display` dereference the underlying pointer. This causes a invalid pointer dereference e.g., when a pointer created with `Atomic::null` or `Shared::null`. `fmt::Debug` impls and pre-0.9 `fmt::Display` impls, which do not dereference pointers, are not affected by this issue.

See [advisory page](https://rustsec.org/advisories/RUSTSEC-2026-0204.html) for additional details.

Read the RUSTSEC-2026-0204 advisory and inspect the repository's dependency manifests for crossbeam-epoch 0.9.18. Check whether the project uses the affected fmt::Pointer implementations and whether upgrading to crossbeam-epoch 0.9.20 or later is compatible. Done means the affected dependency is addressed and the project's existing checks pass.

Written by the indexing model from the issue text.