Description
vmm-sys-util is a collection of modules that provides helpers and utilities used by multiple rust-vmm components. Starting in version 0.5.0 and prior to version 0.12.0, an issue in the `FamStructWrapper::deserialize` implementation provided by the crate for `vmm_sys_util::fam::FamStructWrapper` can lead to out of bounds memory accesses. The deserialization does not check that the length stored in the header matches the flexible array length. Mismatch in the lengths might allow out of bounds memory access through Rust-safe methods. The issue was corrected in version 0.12.0 by inserting a check that verifies the lengths of compared flexible arrays are equal for any deserialized header and aborting deserialization otherwise. Moreover, the API was changed so that header length can only be modified through Rust-unsafe code. This ensures that users cannot trigger out-of-bounds memory access from Rust-safe code.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| rust-vmm | vmm-sys-util | >= 0.5.0, < 0.12.0 | — |
Fixed in Linux distributions
Distributions backport fixes, so the version that fixes this vulnerability differs per release — upgrade to at least the version shown. From the distributions' security trackers and advisories.
Debian
Security tracker ↗| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| Debian 14 | rust-vmm-sys-util | 0.12.1-1 | — |
| Debian 13 | rust-vmm-sys-util | 0.12.1-1 | — |
Ubuntu
Security tracker ↗| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| Ubuntu 26.10 | rust-vmm-sys-util | No fix yet | — |
| Ubuntu 26.04 LTS | rust-vmm-sys-util | No fix yet | — |
| Ubuntu 25.10 | rust-vmm-sys-util | No fix yet | — |
| Ubuntu 24.04 LTS | rust-vmm-sys-util | No fix yet | — |
SUSE
Security tracker ↗| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| SLES 15 SP6 | aws-nitro-enclaves-cli | 1.3.0~git1.db34c02-150600.10.3.1 | SUSE-SU-2024:1966-1 |
| SLES 15 SP5 | aws-nitro-enclaves-cli | 1.3.0~git1.db34c02-150400.3.6.1 | SUSE-SU-2024:1984-1 |
| SLES 15 SP5 | sevctl | 0.4.3-150500.3.3.1 | SUSE-SU-2024:0250-1 |
| SLES 15 SP4 | aws-nitro-enclaves-cli | 1.3.0~git1.db34c02-150400.3.6.1 | SUSE-SU-2024:1984-1 |
Show 1 more (older releases, extended support, other products)Fewer releases
| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| SLE Micro 6.0 | sevctl | 0.4.3-2.1 | SUSE-SU-2025:20071-1 |
openSUSE
Security tracker ↗| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| openSUSE Tumbleweed | sevctl | 0.4.3-2.1 | openSUSE-SU-2024:13624-1 |
| openSUSE Tumbleweed | virtiofsd | 1.10.1-1.1 | openSUSE-SU-2024:13645-1 |
| openSUSE Leap 15.6 | aws-nitro-enclaves-cli | 1.3.0~git1.db34c02-150600.10.3.1 | SUSE-SU-2024:1966-1 |
| openSUSE Leap 15.5 | aws-nitro-enclaves-cli | 1.3.0~git1.db34c02-150400.3.6.1 | SUSE-SU-2024:1984-1 |
| openSUSE Leap 15.5 | sevctl | 0.4.3-150500.3.3.1 | SUSE-SU-2024:0250-1 |
Azure Linux
| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| Azure Linux 2 (CBL-Mariner) | cloud-hypervisor | 32.0-3 | — |
Affected packages
| Ecosystem | Package | Affected | Fixed | Record |
|---|---|---|---|---|
| crates.io | vmm-sys-util | >= 0.5.0, < 0.12.0 | 0.12.0 | GHSA-875g-mfp6-g7f9 |
Advisories 6
- SUSE-SU-2025:20071-1 Security update for sevctl SUSE / openSUSE Security Updates · Mar 23, 2026
- openSUSE-SU-2024:13645-1 virtiofsd-1.10.1-1.1 on GA media SUSE / openSUSE Security Updates · Feb 4, 2026
- SUSE-SU-2024:1966-1 Security update for aws-nitro-enclaves-cli SUSE / openSUSE Security Updates · Feb 4, 2026
- SUSE-SU-2024:1984-1 Security update for aws-nitro-enclaves-cli SUSE / openSUSE Security Updates · Feb 4, 2026
- openSUSE-SU-2024:13624-1 sevctl-0.4.3-2.1 on GA media SUSE / openSUSE Security Updates · Feb 4, 2026
- SUSE-SU-2024:0250-1 Security update for sevctl SUSE / openSUSE Security Updates · Feb 4, 2026
References
- https://github.com/rust-vmm/vmm-sys-util/security/advisories/GHSA-875g-mfp6-g7f9
- https://github.com/rust-vmm/vmm-sys-util/commit/30172fca2a8e0a38667d934ee56682247e13f167
- https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/W5XMCLV2P3ANS3XN4NXZTV4PUNTLWUNJ/
- https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/YJI7D273R6G5RUC246KTI2YY3AXZKZMD/