wicked2nm-1.2.1-1.1 on GA media SUSE Patch security@suse.de SUSE Security Team openSUSE-SU-2025:16532 Final 1 1 2025-08-20T00:00:00Z current 2025-08-20T00:00:00Z 2025-08-20T00:00:00Z cve-database/bin/generate-cvrf.pl 2017-02-24T01:00:00Z wicked2nm-1.2.1-1.1 on GA media These are all security issues fixed in the wicked2nm-1.2.1-1.1 package on the GA media of openSUSE Tumbleweed. The CVRF data is provided by SUSE under the Creative Commons License 4.0 with Attribution (CC-BY-4.0). openSUSE-Tumbleweed-2025-16532 Copyright SUSE LLC under the Creative Commons License 4.0 with Attribution (CC-BY-4.0) https://www.suse.com/support/security/rating/ SUSE Security Ratings https://www.suse.com/security/cve/CVE-2025-55159/ SUSE CVE CVE-2025-55159 page openSUSE Tumbleweed wicked2nm-1.2.1-1.1 wicked2nm-1.2.1-1.1 as a component of openSUSE Tumbleweed slab is a pre-allocated storage for a uniform data type. In version 0.4.10, the get_disjoint_mut method incorrectly checked if indices were within the slab's capacity instead of its length, allowing access to uninitialized memory. This could lead to undefined behavior or potential crashes. This has been fixed in slab 0.4.11. A workaround for this issue involves to avoid using get_disjoint_mut with indices that might be beyond the slab's actual length. CVE-2025-55159 openSUSE Tumbleweed:wicked2nm-1.2.1-1.1 moderate To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/security/cve/CVE-2025-55159.html CVE-2025-55159 https://bugzilla.suse.com/1248000 SUSE Bug 1248000