Import Source
https://github.com/microsoft/AzureLinuxVulnerabilityData/blob/main/osv/AZL-74897.json
JSON Data
https://api.osv.dev/v1/vulns/AZL-74897
Upstream
Published
2025-08-11T23:15:28Z
Modified
2026-04-21T04:38:48.329621Z
Summary
CVE-2025-55159 affecting package rust 1.90.0-3
Details

slab is a pre-allocated storage for a uniform data type. In version 0.4.10, the getdisjointmut method incorrectly checked if indices were within the slab's capacity instead of its length, allowing access to uninitialized memory. This could lead to undefined behavior or potential crashes. This has been fixed in slab 0.4.11. A workaround for this issue involves to avoid using getdisjointmut with indices that might be beyond the slab's actual length.

References

Affected packages

Azure Linux:3 / rust

Package

Name
rust
Purl
pkg:rpm/azure-linux/rust

Affected ranges

Type
ECOSYSTEM
Events
Introduced
1.85.0
Last affected
1.90.0-3

Database specific

source
"https://github.com/microsoft/AzureLinuxVulnerabilityData/blob/main/osv/AZL-74897.json"