CVE catalog

CVE-2026-25541

rust-bytes: CVE-2026-25541

[CVE catalog]

Severity
High · CVSS 7.5CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
Published
Source
[NVD] · [CVE record]
EPSS
0.61% · Oct 23, 2026

Bytes is a utility library for working with bytes. From version 1.2.1 to before 1.11.1, Bytes is vulnerable to integer overflow in BytesMut::reserve. In the unique reclaim path of BytesMut::reserve, if the condition "v_capacity >= new_cap + offset" uses an unchecked addition. When new_cap + offset overflows usize in release builds, this condition may incorrectly pass, causing self.cap to be set to a value that exceeds the actual allocated capacity. Subsequent APIs such as spare_capacity_mut() then trust this corrupted cap value and may create out-of-bounds slices, leading to UB. This behavior is observable in release builds (integer overflow wraps), whereas debug builds panic due to overflow checks. This issue has been patched in version 1.11.1.

Vulnerable and fixed packages

Distribution-reported package versions and fixes. These do not depend on matching against the OpenFactory package catalog.

DistributionPackageReleaseVersionStatus
Debianrust-bytessid1.12.1-1fixed
Debianrust-bytesforky1.12.1-1fixed
Debianrust-bytestrixie1.9.0-1vulnerable
Debianrust-bytesbookworm1.2.1-1vulnerable
Opensusetealdeertumbleweed1.8.0-2.1fixed
Suseaws-nitro-enclaves-clilinux enterprise server 16.01.5.0~git0.2950b36-160000.1.1fixed
Suseaws-nitro-enclaves-clilinux enterprise server for sap applications 16.01.5.0~git0.2950b36-160000.1.1fixed
Suseaws-nitro-enclaves-clilinux enterprise server 16.01.5.0~git0.2950b36-160000.1.1fixed
Suseaws-nitro-enclaves-clilinux enterprise server for sap applications 16.01.5.0~git0.2950b36-160000.1.1fixed
Opensuselibrepodstumbleweed0.1.0+git20260515.672e65a-1.1fixed
Suseaws-nitro-enclaves-clilinux enterprise module for public cloud 15 sp61.5.0~git0.2950b36-150600.10.15.1fixed
Suseaws-nitro-enclaves-clilinux enterprise module for public cloud 15 sp71.5.0~git0.2950b36-150600.10.15.1fixed
Opensusewaylyricsleap 16.00.4.0-bp160.1.1fixed
Opensusesupergfxctlleap 16.01762634235.5d503b1-bp160.1.1fixed
Opensuseaws-nitro-enclaves-clileap 16.01.5.0~git0.2950b36-160000.1.1fixed
Opensuseaws-nitro-enclaves-clitumbleweed1.5.0~git0.2950b36-1.1fixed
Opensusetree-sittertumbleweed0.26.8-5.1fixed
Opensusesequoia-sqleap 16.01.4.0-bp160.1.1fixed
Susesccachelinux enterprise module for development tools 15 sp70.17.0~1-150600.10.14.1fixed
Susesccachelinux enterprise server 15 sp6-ltss0.17.0~1-150600.10.14.1fixed
Susesccachelinux enterprise server for sap applications 15 sp60.17.0~1-150600.10.14.1fixed
Opensusemarkdown-oxidetumbleweed0.25.12-1.1fixed
Opensuseforgejo-clitumbleweed0.6.0-2.1fixed
Opensusecargo-ctumbleweed0.10.23-2.1fixed
Opensuseobs-service-cargotumbleweed7.2.2-2.1fixed
Opensuserustuptumbleweed1.29.0~0-1.1fixed
Opensusesccachetumbleweed0.17.0~1-2.1fixed
Opensusewasm-bindgentumbleweed0.2.100-2.1fixed
Opensusecargo-audittumbleweed0.22.2~git0.281452c-2.1fixed
Opensusegit-clifftumbleweed2.13.1-1.1fixed
Susesnpguestlinux enterprise server 15 sp6-ltss0.3.2-150600.3.14.1fixed
Susesnpguestlinux enterprise server for sap applications 15 sp60.3.2-150600.3.14.1fixed
Opensusewildtumbleweed0.10.0-2.1fixed
Opensusegitoxidetumbleweed0.56.0-1.1fixed
Susenm-configuratorlinux micro 6.20.3.5-160000.1.1fixed
Suseafterburnlinux enterprise server 16.05.10.0.git73.b97f772-160000.1.1fixed
Suseafterburnlinux enterprise server for sap applications 16.05.10.0.git73.b97f772-160000.1.1fixed
Opensuseafterburnleap 16.05.10.0.git73.b97f772-160000.1.1fixed
Opensusenm-configuratorleap 16.00.3.5-160000.1.1fixed
Suseafterburnlinux micro 6.25.10.0.git73.b97f772-160000.1.1fixed
Opensusenm-configuratortumbleweed0.3.5-2.1fixed
Suseafterburnlinux enterprise micro 5.45.10.0.git73.b97f772-150400.3.6.1fixed
Suseafterburnlinux enterprise micro 5.35.10.0.git73.b97f772-150400.3.6.1fixed
Suseafterburnlinux enterprise micro 5.55.10.0.git73.b97f772-150500.3.6.1fixed
Opensuseafterburntumbleweed5.10.0.git73.b97f772-1.1fixed
Ubunturust-bytes20.040.4.12-1vulnerable
Ubunturust-bytes22.040.4.12-1vulnerable
Ubunturust-bytes22.041.1.0-1vulnerable
Ubunturust-bytes24.041.4.0-1vulnerable
Ubunturust-bytes24.041.5.0-1vulnerable
Ubunturust-bytes25.101.9.0-1vulnerable
Ubunturust-bytes26.041.9.0-1vulnerable
Ubunturust-bytes26.041.10.1-1vulnerable
Ubunturust-bytes26.041.11.0-1vulnerable
Ubunturust-bytes26.041.11.1-1vulnerable
Opensuseswitcherootumbleweed2.6.0-1.1fixed

Fixed-version evidence

DistributionPackageTypeReleaseFixed versionUrgencyOriginBugs
Debianrust-bytessourcesid1.11.1-1not yet assignedNot reportedNot reported
Debianrust-bytessourceforky1.11.1-1not yet assignedNot reportedNot reported
Debianrust-bytessourcetrixie(unfixed)not yet assignedNot reportedNot reported
Debianrust-bytessourcebookworm(unfixed)not yet assignedNot reportedNot reported
Opensusetealdeerrpmtumbleweed1.8.0-2.1Not reportedOPENSUSE-SU-2026:11905-1Not reported
Suseaws-nitro-enclaves-clirpmlinux enterprise server 16.01.5.0~git0.2950b36-160000.1.1Not reportedSUSE-SU-2026:23659-1Not reported
Suseaws-nitro-enclaves-clirpmlinux enterprise server for sap applications 16.01.5.0~git0.2950b36-160000.1.1Not reportedSUSE-SU-2026:23659-1Not reported
Suseaws-nitro-enclaves-clirpmlinux enterprise server 16.01.5.0~git0.2950b36-160000.1.1Not reportedSUSE-SU-2026:23643-1Not reported
Suseaws-nitro-enclaves-clirpmlinux enterprise server for sap applications 16.01.5.0~git0.2950b36-160000.1.1Not reportedSUSE-SU-2026:23643-1Not reported
Opensuselibrepodsrpmtumbleweed0.1.0+git20260515.672e65a-1.1Not reportedOPENSUSE-SU-2026:11835-1Not reported
Suseaws-nitro-enclaves-clirpmlinux enterprise module for public cloud 15 sp61.5.0~git0.2950b36-150600.10.15.1Not reportedSUSE-SU-2026:3992-1Not reported
Suseaws-nitro-enclaves-clirpmlinux enterprise module for public cloud 15 sp71.5.0~git0.2950b36-150600.10.15.1Not reportedSUSE-SU-2026:3992-1Not reported
Opensusewaylyricsrpmleap 16.00.4.0-bp160.1.1Not reportedOPENSUSE-SU-2026:21815-1Not reported
Opensusesupergfxctlrpmleap 16.01762634235.5d503b1-bp160.1.1Not reportedOPENSUSE-SU-2026:21794-1Not reported
Opensuseaws-nitro-enclaves-clirpmleap 16.01.5.0~git0.2950b36-160000.1.1Not reportedOPENSUSE-SU-2026:21782-1Not reported
Opensuseaws-nitro-enclaves-clirpmtumbleweed1.5.0~git0.2950b36-1.1Not reportedOPENSUSE-SU-2026:11656-1Not reported
Opensusetree-sitterrpmtumbleweed0.26.8-5.1Not reportedOPENSUSE-SU-2026:11655-1Not reported
Opensusesequoia-sqrpmleap 16.01.4.0-bp160.1.1Not reportedOPENSUSE-RU-2026:21658-1Not reported
Susesccacherpmlinux enterprise module for development tools 15 sp70.17.0~1-150600.10.14.1Not reportedSUSE-SU-2026:3674-1Not reported
Susesccacherpmlinux enterprise server 15 sp6-ltss0.17.0~1-150600.10.14.1Not reportedSUSE-SU-2026:3674-1Not reported
Susesccacherpmlinux enterprise server for sap applications 15 sp60.17.0~1-150600.10.14.1Not reportedSUSE-SU-2026:3674-1Not reported
Opensusemarkdown-oxiderpmtumbleweed0.25.12-1.1Not reportedOPENSUSE-SU-2026:11549-1Not reported
Opensuseforgejo-clirpmtumbleweed0.6.0-2.1Not reportedOPENSUSE-SU-2026:11529-1Not reported
Opensusecargo-crpmtumbleweed0.10.23-2.1Not reportedOPENSUSE-SU-2026:11513-1Not reported
Opensuseobs-service-cargorpmtumbleweed7.2.2-2.1Not reportedOPENSUSE-SU-2026:11522-1Not reported
Opensuserustuprpmtumbleweed1.29.0~0-1.1Not reportedOPENSUSE-SU-2026:11525-1Not reported
Opensusesccacherpmtumbleweed0.17.0~1-2.1Not reportedOPENSUSE-SU-2026:11527-1Not reported
Opensusewasm-bindgenrpmtumbleweed0.2.100-2.1Not reportedOPENSUSE-SU-2026:11528-1Not reported
Opensusecargo-auditrpmtumbleweed0.22.2~git0.281452c-2.1Not reportedOPENSUSE-SU-2026:11512-1Not reported
Opensusegit-cliffrpmtumbleweed2.13.1-1.1Not reportedOPENSUSE-SU-2026:11495-1Not reported
Susesnpguestrpmlinux enterprise server 15 sp6-ltss0.3.2-150600.3.14.1Not reportedSUSE-SU-2026:3577-1Not reported
Susesnpguestrpmlinux enterprise server for sap applications 15 sp60.3.2-150600.3.14.1Not reportedSUSE-SU-2026:3577-1Not reported
Opensusewildrpmtumbleweed0.10.0-2.1Not reportedOPENSUSE-SU-2026:11482-1Not reported
Opensusegitoxiderpmtumbleweed0.56.0-1.1Not reportedOPENSUSE-SU-2026:11474-1Not reported
Susenm-configuratorrpmlinux micro 6.20.3.5-160000.1.1Not reportedSUSE-SU-2026:22935-1Not reported
Suseafterburnrpmlinux enterprise server 16.05.10.0.git73.b97f772-160000.1.1Not reportedSUSE-SU-2026:22827-1Not reported
Suseafterburnrpmlinux enterprise server for sap applications 16.05.10.0.git73.b97f772-160000.1.1Not reportedSUSE-SU-2026:22827-1Not reported
Opensuseafterburnrpmleap 16.05.10.0.git73.b97f772-160000.1.1Not reportedOPENSUSE-SU-2026:21386-1Not reported
Opensusenm-configuratorrpmleap 16.00.3.5-160000.1.1Not reportedOPENSUSE-SU-2026:21428-1Not reported
Suseafterburnrpmlinux micro 6.25.10.0.git73.b97f772-160000.1.1Not reportedSUSE-SU-2026:22787-1Not reported
Opensusenm-configuratorrpmtumbleweed0.3.5-2.1Not reportedOPENSUSE-SU-2026:11280-1Not reported
Suseafterburnrpmlinux enterprise micro 5.45.10.0.git73.b97f772-150400.3.6.1Not reportedSUSE-SU-2026:2977-1Not reported
Suseafterburnrpmlinux enterprise micro 5.35.10.0.git73.b97f772-150400.3.6.1Not reportedSUSE-SU-2026:2976-1Not reported
Suseafterburnrpmlinux enterprise micro 5.55.10.0.git73.b97f772-150500.3.6.1Not reportedSUSE-SU-2026:2975-1Not reported
Opensuseafterburnrpmtumbleweed5.10.0.git73.b97f772-1.1Not reportedOPENSUSE-SU-2026:11255-1Not reported
Opensuseswitcheroorpmtumbleweed2.6.0-1.1Not reportedOPENSUSE-SU-2026:12205-1Not reported

Notes

[trixie] rust-bytes: Minor issue [bookworm] rust-bytes: Minor issue

OpenFactory catalog packages

[Debian 12 (Bookworm)]

  • [librust-bytes-dev]Affected

    Source package: [rust-bytes]

    Details (2)

    • 1.2.1-1 · amd64 · bookworm

      Affected

      dsa · rust-bytes · debian · bookworm; dsa · rust-bytes · debian · 12

    • 1.2.1-1 · arm64 · bookworm

      Affected

      dsa · rust-bytes · debian · bookworm; dsa · rust-bytes · debian · 12

  • [librust-bytes+serde-dev]Affected

    Source package: [rust-bytes]

    Details (2)

    • 1.2.1-1 · amd64 · bookworm

      Affected

      dsa · rust-bytes · debian · bookworm; dsa · rust-bytes · debian · 12

    • 1.2.1-1 · arm64 · bookworm

      Affected

      dsa · rust-bytes · debian · bookworm; dsa · rust-bytes · debian · 12

[Debian 13 (Trixie)]

  • [librust-bytes-dev]Affected

    Source package: [rust-bytes]

    Details (2)

    • 1.9.0-1 · amd64 · trixie

      Affected

      dsa · rust-bytes · debian · 13

    • 1.9.0-1 · arm64 · trixie

      Affected

      dsa · rust-bytes · debian · 13

[openSUSE Tumbleweed]

  • [aws-nitro-enclaves-cli]Affected

    Source package: [aws-nitro-enclaves-cli]

    Details (1)

    • 1.4.5~git0.18a5f6f-1.2 · x86_64 · tumbleweed

      Affected · Fixed: 1.5.0~git0.2950b36-1.1

      dsa · aws-nitro-enclaves-cli · opensuse · tumbleweed

  • [librepods]Affected

    Source package: [librepods]

    Details (1)

    • 0.1.0-3.5 · x86_64 · tumbleweed

      Affected · Fixed: 0.1.0+git20260515.672e65a-1.1

      dsa · librepods · opensuse · tumbleweed

  • [switcheroo]Affected

    Source package: [switcheroo]

    Details (1)

    • 2.5.1-1.5 · x86_64 · tumbleweed

      Affected · Fixed: 2.6.0-1.1

      dsa · switcheroo · opensuse · tumbleweed

  • [tealdeer]Affected

    Source package: [tealdeer]

    Details (1)

    • 1.8.0-1.5 · x86_64 · tumbleweed

      Affected · Fixed: 1.8.0-2.1

      dsa · tealdeer · opensuse · tumbleweed

  • [tree-sitter]Affected

    Source package: [tree-sitter]

    Details (1)

    • 0.26.8-4.1 · x86_64 · tumbleweed

      Affected · Fixed: 0.26.8-5.1

      dsa · tree-sitter · opensuse · tumbleweed

  • [afterburn-dracut]Unknown

    Source package: [afterburn]

    Details (1)

    • 5.10.0.git73.b97f772-2.1 · noarch · tumbleweed

      Unknown · Fixed: 5.10.0.git73.b97f772-1.1

      Version impact unknown

      dsa · afterburn · opensuse · tumbleweed

  • [aws-nitro-enclaves-binaryblobs-upstream]Unknown

    Source package: [aws-nitro-enclaves-cli]

    Details (1)

    • 1.4.5~git0.18a5f6f-1.2 · x86_64 · tumbleweed

      Unknown · Fixed: 1.5.0~git0.2950b36-1.1

      Version impact unknown

      dsa · aws-nitro-enclaves-cli · opensuse · tumbleweed

  • [git-cliff-bash-completion]Unknown

    Source package: [git-cliff]

    Details (1)

    • 2.13.1-2.1 · noarch · tumbleweed

      Unknown · Fixed: 2.13.1-1.1

      Version impact unknown

      dsa · git-cliff · opensuse · tumbleweed

  • [git-cliff-fish-completion]Unknown

    Source package: [git-cliff]

    Details (1)

    • 2.13.1-2.1 · noarch · tumbleweed

      Unknown · Fixed: 2.13.1-1.1

      Version impact unknown

      dsa · git-cliff · opensuse · tumbleweed

  • [git-cliff-zsh-completion]Unknown

    Source package: [git-cliff]

    Details (1)

    • 2.13.1-2.1 · noarch · tumbleweed

      Unknown · Fixed: 2.13.1-1.1

      Version impact unknown

      dsa · git-cliff · opensuse · tumbleweed

  • [libtree-sitter0_26]Unknown

    Source package: [tree-sitter]

    Details (1)

    • 0.26.8-4.1 · x86_64 · tumbleweed

      Unknown · Fixed: 0.26.8-5.1

      Version impact unknown

      dsa · tree-sitter · opensuse · tumbleweed

  • [libtree-sitter0_26-x86-64-v3]Unknown

    Source package: [tree-sitter]

    Details (1)

    • 0.26.8-4.1 · x86_64 · tumbleweed

      Unknown · Fixed: 0.26.8-5.1

      Version impact unknown

      dsa · tree-sitter · opensuse · tumbleweed

  • [switcheroo-lang]Unknown

    Source package: [switcheroo]

    Details (1)

    • 2.5.1-1.5 · noarch · tumbleweed

      Unknown · Fixed: 2.6.0-1.1

      Version impact unknown

      dsa · switcheroo · opensuse · tumbleweed

  • [system-group-ne]Unknown

    Source package: [aws-nitro-enclaves-cli]

    Details (1)

    • 1.4.5~git0.18a5f6f-1.2 · x86_64 · tumbleweed

      Unknown · Fixed: 1.5.0~git0.2950b36-1.1

      Version impact unknown

      dsa · aws-nitro-enclaves-cli · opensuse · tumbleweed

  • [tealdeer-bash-completion]Unknown

    Source package: [tealdeer]

    Details (1)

    • 1.8.0-1.5 · noarch · tumbleweed

      Unknown · Fixed: 1.8.0-2.1

      Version impact unknown

      dsa · tealdeer · opensuse · tumbleweed

  • [tealdeer-fish-completion]Unknown

    Source package: [tealdeer]

    Details (1)

    • 1.8.0-1.5 · noarch · tumbleweed

      Unknown · Fixed: 1.8.0-2.1

      Version impact unknown

      dsa · tealdeer · opensuse · tumbleweed

  • [tealdeer-zsh-completion]Unknown

    Source package: [tealdeer]

    Details (1)

    • 1.8.0-1.5 · noarch · tumbleweed

      Unknown · Fixed: 1.8.0-2.1

      Version impact unknown

      dsa · tealdeer · opensuse · tumbleweed

Next results

Observed:

References

[CERT-Bund public advisories] · [Debian Security Tracker] · [FIRST EPSS] · [OSV Package Vulnerability Database] · [SUSE security advisories and VEX]