CVE-2026-25541 affecting package rust for versions less than 1.72.0-15

CVE-2026-25541 affecting package rust for versions less than 1.72.0-15. A patched version of the package is available...

CVE-2026-25541 affecting package kata-containers for versions less than 3.19.1.kata2-5

CVE-2026-25541 affecting package kata-containers for versions less than 3.19.1.kata2-5. A patched version of the package is available...

CVE-2026-25541

Bytes is a utility library for working with bytes. From version 1.2.1 to before 1.11.1, Bytes is vulnerable to integer overflow in BytesMut::reserve. In the unique reclaim path of BytesMut::reserve, if the condition "vcapacity = newcap + offset" uses an unchecked addition. When newcap + offset...

CVE-2026-25541 vulnerabilities

Vulnerabilities for packages: linkerd-await, samply, xh, garage, zed, pgcat, linkerd-extension-init, buck2, rustup, yazi, ztunnel, helix, bootc, komodo, zellij, fnm, zola, parseable, linkerd-network-validator, lychee, ntpd-rs, sccache, linkerd2-cni-plugin, qdrant, shadowsocks-rust, watchexec, den...

Linux Distros Unpatched Vulnerability : CVE-2026-25541

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Bytes is a utility library for working with bytes. From version 1.2.1 to before 1.11.1, Bytes is vulnerable to integer overflow in BytesMut::reserve. In the...

CVE-2026-25541

creationtimestamp| type| source ---|---|--- 2026-02-03 14:12:09+00:00| published-proof-of-concept| https://github.com/tokio-rs/bytes/security/advisories/GHSA-434x-w66g-qw3r...