CVE-2026-25541 affecting package rust for versions less than 1.72.0-15

CVE-2026-25541 affecting package rust for versions less than 1.72.0-15. A patched version of the package is available...

CVE-2026-25541 affecting package kata-containers for versions less than 3.19.1.kata2-5

CVE-2026-25541 affecting package kata-containers for versions less than 3.19.1.kata2-5. A patched version of the package is available...

CVE-2026-25541

Bytes is a utility library for working with bytes. From version 1.2.1 to before 1.11.1, Bytes is vulnerable to integer overflow in BytesMut::reserve. In the unique reclaim path of BytesMut::reserve, if the condition "vcapacity = newcap + offset" uses an unchecked addition. When newcap + offset...

CVE-2026-25541 vulnerabilities

Vulnerabilities for packages: zed, sdp-k8s-injector, linkerd2, atuin, sccache, buck2, nushell, pgcat, wasmtime, zola, ztunnel-fips, deno, pixi, cargo-audit, linkerd-extension-init, wasmcloud, linkerd-network-validator, wizer, asciinema, sqlx, valkey-ldap, kdash, ntpd-rs, helix, lychee, zellij,...

Linux Distros Unpatched Vulnerability : CVE-2026-25541

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Bytes is a utility library for working with bytes. From version 1.2.1 to before 1.11.1, Bytes is vulnerable to integer overflow in BytesMut::reserve. In the...

CVE-2026-25541

creationtimestamp| type| source ---|---|--- 2026-02-03 14:12:09+00:00| published-proof-of-concept| https://github.com/tokio-rs/bytes/security/advisories/GHSA-434x-w66g-qw3r...