CVE-2026-25541 affecting package rust for versions less than 1.72.0-15

CVE-2026-25541 affecting package rust for versions less than 1.72.0-15. A patched version of the package is available...

CVE-2026-25541 affecting package kata-containers for versions less than 3.19.1.kata2-5

CVE-2026-25541 affecting package kata-containers for versions less than 3.19.1.kata2-5. A patched version of the package is available...

CVE-2026-25541

Bytes is a utility library for working with bytes. From version 1.2.1 to before 1.11.1, Bytes is vulnerable to integer overflow in BytesMut::reserve. In the unique reclaim path of BytesMut::reserve, if the condition "vcapacity = newcap + offset" uses an unchecked addition. When newcap + offset...

CVE-2026-25541 vulnerabilities

Vulnerabilities for packages: uv, linkerd2, linkerd2-proxy, nushell, mdbook, qdrant, bootc, tealdeer, valkey-ldap, shadowsocks-rust, zellij, deno, sentry-cli, ztunnel-fips, oranda, buck2, zed, linkerd-await, lychee, yazi, zizmor, topgrade, helix, komodo, parseable, py3-xet-core, wadm, wasmcloud,...

Linux Distros Unpatched Vulnerability : CVE-2026-25541

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Bytes is a utility library for working with bytes. From version 1.2.1 to before 1.11.1, Bytes is vulnerable to integer overflow in BytesMut::reserve. In the...

CVE-2026-25541

creationtimestamp| type| source ---|---|--- 2026-02-03 14:12:09+00:00| published-proof-of-concept| https://github.com/tokio-rs/bytes/security/advisories/GHSA-434x-w66g-qw3r...