CVE-2025-38033 x86/Kconfig: make CFI_AUTO_DEFAULT depend on !RUST or Rust >= 1.88

In the Linux kernel, the following vulnerability has been resolved: x86/Kconfig: make CFIAUTODEFAULT depend on !RUST or Rust = 1.88 Calling core::fmt::write from rust code while FineIBT is enabled results in a kernel panic: 4614.199779 kernel BUG at arch/x86/kernel/cet.c:132! 4614.205343 Oops:...

CVE-2025-38033

CVE-2025-38033 affects the Linux kernel (x86) where FineIBT and Rust integration triggers a kernel panic when core::fmt::write() is invoked from Rust with FineIBT enabled. Root cause is that core::fmt::rt::Argument::fmt() has CFI-disabled code (no_sanitize(cfi, kcfi)), causing a Control Protectio...

CVE-2025-38033

In the Linux kernel, the following vulnerability has been resolved: x86/Kconfig: make CFIAUTODEFAULT depend on !RUST or Rust = 1.88 Calling core::fmt::write from rust code while FineIBT is enabled results in a kernel panic: 4614.199779 kernel BUG at arch/x86/kernel/cet.c:132! 4614.205343 Oops:...

Linux kernel 安全漏洞

Linux kernel is the kernel used by Linux, the open source operating system of the Linux Foundation in the United States. A security vulnerability exists in the Linux kernel that stems from a Rust version incompatibility that could cause the kernel to crash...

Fedora 42 : rust-git-interactive-rebase-tool (2025-da9b58be96)

The remote Fedora 42 host has a package installed that is affected by multiple vulnerabilities as referenced in the FEDORA-2025-da9b58be96 advisory. Rebuild for CVE-2024-12224, CVE-2025-4574 Tenable has extracted the preceding description block directly from the Fedora security advisory. Note tha...

[SECURITY] Fedora 41 Update: fido-device-onboard-0.5.1-3.fc41

A rust implementation of the FIDO Device Onboard Specification...

[SECURITY] Fedora 41 Update: rust-git-interactive-rebase-tool-2.4.1-9.fc41

Full-featured terminal-based sequence editor for Git interactive rebase...

Fedora: Security Advisory (FEDORA-2025-26640e9e35)

The remote host is missing an update for the SPDX-FileCopyrightText: 2025 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

allyaudio (>=0.1.0 <=0.4.0), ambisonic (>=0.4.0 <=0.4.1) +130 more potentially affected by unknown CVE via slice-ring-buffer (=0.3.4)

slice-ring-buffer CARGO version =0.3.4 is affected by a known vulnerability. The following packages have a transitive dependency on slice-ring-buffer and may be impacted: - allyaudio =0.1.0, =0.4.0, =0.0.9, =0.0.3, =0.0.1, =0.1.0, =1.0.0, =0.1.0, =0.1.0, =0.0.0, =0.1.0 - bevykiraaudio =0.4.0 and...

Four unique double-free vulnerabilities triggered via safe APIs

The crate slice-ring-buffer was developed as a fork of slice-deque to continue maintenance and provide security patches, since the latter has been officially unmaintained RUSTSEC-2020-0158. While slice-ring-buffer has addressed some previously reported memory safety issues inherited from its fork...

Astra Linux – Vulnerability in GCC-12

In libiberty/rust-demangle.c within GNU GCC 11.2, stack consumption is allowed in the demangleconst function, as demonstrated by the nm-new output...

Fedora: Security Advisory (FEDORA-2025-4fc3431dab)

The remote host is missing an update for the SPDX-FileCopyrightText: 2025 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Fedora: Security Advisory (FEDORA-2025-c53905e83d)

The remote host is missing an update for the SPDX-FileCopyrightText: 2025 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

TencentOS Server 3: rust-toolset:rhel8 (TSSA-2022:0116)

The version of Tencent Linux installed on the remote TencentOS Server 3 host is prior to tested version. It is, therefore, affected by multiple vulnerabilities as referenced in the TSSA-2022:0116 advisory. Package updates are available for TencentOS Server 3 that fix the following vulnerabilities...

TencentOS Server 4: rust (TSSA-2024:0635)

The version of Tencent Linux installed on the remote TencentOS Server 4 host is prior to tested version. It is, therefore, affected by multiple vulnerabilities as referenced in the TSSA-2024:0635 advisory. Package updates are available for TencentOS Server 4 that fix the following vulnerabilities...

[SECURITY] Fedora 41 Update: rust-sevctl-0.6.2-3.fc41

Administrative utility for AMD SEV...

[SECURITY] Fedora 41 Update: rust-kbs-types-0.11.0-1.fc41

Rust deserializable types for KBS...

[SECURITY] Fedora 41 Update: rust-sev-6.1.0-2.fc41

Library for AMD SEV...

[SECURITY] Fedora 42 Update: rust-sevctl-0.6.2-3.fc42

Administrative utility for AMD SEV...

[SECURITY] Fedora 42 Update: rust-sev-6.1.0-2.fc42

Library for AMD SEV...