# CVE-2025-55159: aws-efs-utils: slab: incorrect bounds check in `get_disjoint_mut` function can lead to potential crash due to out-of-bounds access (... CVE-2025-55159 is fixed in 24 products on 1 platform, first by SUSE-SU-2025:20921-1, released October 15, 2025. It is not reported as exploited. Patch Radar priority: Routine. - Web page: https://patchblox.com/security/cve/CVE-2025-55159 - Priority: Routine - CVSS: n/a - EPSS: 0.0019 - CISA KEV: not listed - Exploited (vendor report): no - Publicly disclosed: no - Published: Oct 15, 2025 ## Description slab: incorrect bounds check in `get_disjoint_mut` function can lead to potential crash due to out-of-bounds access (bsc#1248055). ## Where it's fixed | Platform | Product | Fixed in | Fix | Released | |---|---|---|---|---| | Linux | SLES16-Migration sles 15.7 | 2.1.26-15.22.4 | [SUSE-RU-2025:4131-1](https://patchblox.com/security/data/fix/linux/suse-ru-2025-4131-1.md) | Nov 18, 2025 | | Linux | SLES16-SAP_Migration sles 15.7 | 2.1.26-15.14.4 | [SUSE-RU-2025:4131-1](https://patchblox.com/security/data/fix/linux/suse-ru-2025-4131-1.md) | Nov 18, 2025 | | Linux | aws-efs-utils opensuse-leap 15.6 | 2.3.3-150600.17.6.1 | [SUSE-SU-2025:3954-1](https://patchblox.com/security/data/fix/linux/suse-su-2025-3954-1.md) | Nov 5, 2025 | | Linux | aws-efs-utils sles 15.6 | 2.3.3-150600.17.6.1 | [SUSE-SU-2025:3954-1](https://patchblox.com/security/data/fix/linux/suse-su-2025-3954-1.md) | Nov 5, 2025 | | Linux | aws-efs-utils sles 15.7 | 2.3.3-150600.17.6.1 | [SUSE-SU-2025:3954-1](https://patchblox.com/security/data/fix/linux/suse-su-2025-3954-1.md) | Nov 5, 2025 | | Linux | flake-pilot opensuse-leap 16.0 | 3.1.22-160000.1.1 | [OPENSUSE-SU-2025:20013-1](https://patchblox.com/security/data/fix/linux/opensuse-su-2025-20013-1.md) | Oct 15, 2025 | | Linux | flake-pilot sles 16.0 | 3.1.22-160000.1.1 | [SUSE-SU-2025:20921-1](https://patchblox.com/security/data/fix/linux/suse-su-2025-20921-1.md) | Oct 15, 2025 | | Linux | forgejo-cli opensuse-leap 16.0 | 0.6.0-bp160.1.1 | [OPENSUSE-SU-2026:21605-1](https://patchblox.com/security/data/fix/linux/opensuse-su-2026-21605-1.md) | Aug 18, 2026 | | Linux | git-cliff opensuse-leap 16.0 | 2.13.1-bp160.1.1 | [OPENSUSE-SU-2026:21584-1](https://patchblox.com/security/data/fix/linux/opensuse-su-2026-21584-1.md) | Aug 14, 2026 | | Linux | glycin-loaders opensuse-leap 16.0 | 1.2.1-160000.3.1 | [OPENSUSE-SU-2026:21134-1](https://patchblox.com/security/data/fix/linux/opensuse-su-2026-21134-1.md) | Jun 20, 2026 | | Linux | glycin-loaders sles 16.0 | 1.2.1-160000.3.1 | [SUSE-SU-2026:22302-1](https://patchblox.com/security/data/fix/linux/suse-su-2026-22302-1.md) | Jul 6, 2026 | | Linux | gstreamer opensuse-leap 16.0 | 1.26.7-160000.1.1 | [OPENSUSE-SU-2026:20329-1](https://patchblox.com/security/data/fix/linux/opensuse-su-2026-20329-1.md) | Mar 5, 2026 | | Linux | gstreamer-devtools opensuse-leap 16.0 | 1.26.7-160000.1.1 | [OPENSUSE-SU-2026:20329-1](https://patchblox.com/security/data/fix/linux/opensuse-su-2026-20329-1.md) | Mar 5, 2026 | | Linux | gstreamer-docs opensuse-leap 16.0 | 1.26.7-160000.1.1 | [OPENSUSE-SU-2026:20329-1](https://patchblox.com/security/data/fix/linux/opensuse-su-2026-20329-1.md) | Mar 5, 2026 | | Linux | gstreamer-plugins-bad opensuse-leap 16.0 | 1.26.7-160000.1.1 | [OPENSUSE-SU-2026:20329-1](https://patchblox.com/security/data/fix/linux/opensuse-su-2026-20329-1.md) | Mar 5, 2026 | | Linux | gstreamer-plugins-base opensuse-leap 16.0 | 1.26.7-160000.1.1 | [OPENSUSE-SU-2026:20329-1](https://patchblox.com/security/data/fix/linux/opensuse-su-2026-20329-1.md) | Mar 5, 2026 | | Linux | gstreamer-plugins-good opensuse-leap 16.0 | 1.26.7-160000.1.1 | [OPENSUSE-SU-2026:20329-1](https://patchblox.com/security/data/fix/linux/opensuse-su-2026-20329-1.md) | Mar 5, 2026 | | Linux | gstreamer-plugins-libav opensuse-leap 16.0 | 1.26.7-160000.1.1 | [OPENSUSE-SU-2026:20329-1](https://patchblox.com/security/data/fix/linux/opensuse-su-2026-20329-1.md) | Mar 5, 2026 | | Linux | gstreamer-plugins-rs opensuse-leap 16.0 | 1.26.7+git0.6ab75814-160000.1.1 | [OPENSUSE-SU-2026:20329-1](https://patchblox.com/security/data/fix/linux/opensuse-su-2026-20329-1.md) | Mar 5, 2026 | | Linux | gstreamer-plugins-ugly opensuse-leap 16.0 | 1.26.7-160000.1.1 | [OPENSUSE-SU-2026:20329-1](https://patchblox.com/security/data/fix/linux/opensuse-su-2026-20329-1.md) | Mar 5, 2026 | | Linux | gstreamer-rtsp-server opensuse-leap 16.0 | 1.26.7-160000.1.1 | [OPENSUSE-SU-2026:20329-1](https://patchblox.com/security/data/fix/linux/opensuse-su-2026-20329-1.md) | Mar 5, 2026 | | Linux | kak-lsp opensuse-leap 16.0 | 21.0.2-bp160.1.1 | [OPENSUSE-SU-2026:21560-1](https://patchblox.com/security/data/fix/linux/opensuse-su-2026-21560-1.md) | Aug 10, 2026 | | Linux | python-Cerberus sles 15.7 | 1.3.2-150700.20.2.10 | [SUSE-RU-2025:4131-1](https://patchblox.com/security/data/fix/linux/suse-ru-2025-4131-1.md) | Nov 18, 2025 | | Linux | rust-keylime opensuse-leap 16.0 | 0.2.8+116-160000.1.1 | [OPENSUSE-SU-2026:20364-1](https://patchblox.com/security/data/fix/linux/opensuse-su-2026-20364-1.md) | Mar 16, 2026 | | Linux | sccache opensuse-leap 15.6 | 0.4.2~4-150600.10.6.1 | [SUSE-SU-2025:3944-1](https://patchblox.com/security/data/fix/linux/suse-su-2025-3944-1.md) | Nov 5, 2025 | | Linux | sccache sles 15.6 | 0.4.2~4-150600.10.6.1 | [SUSE-SU-2025:3944-1](https://patchblox.com/security/data/fix/linux/suse-su-2025-3944-1.md) | Nov 5, 2025 | | Linux | sccache sles 15.7 | 0.4.2~4-150600.10.6.1 | [SUSE-SU-2025:3944-1](https://patchblox.com/security/data/fix/linux/suse-su-2025-3944-1.md) | Nov 5, 2025 | | Linux | suse-migration-services sles 15.7 | 2.1.26-150700.16.12.1 | [SUSE-RU-2025:4131-1](https://patchblox.com/security/data/fix/linux/suse-ru-2025-4131-1.md) | Nov 18, 2025 | | Linux | suse-migration-sle16-activation sles 15.7 | 2.1.26-150700.15.9.1 | [SUSE-RU-2025:4131-1](https://patchblox.com/security/data/fix/linux/suse-ru-2025-4131-1.md) | Nov 18, 2025 | | Linux | wicked2nm sles 15.7 | 1.4.0-150700.15.7.2 | [SUSE-RU-2025:4131-1](https://patchblox.com/security/data/fix/linux/suse-ru-2025-4131-1.md) | Nov 18, 2025 | --- Data as of 2026-11-11T07:45:43Z UTC. Source: Patchblox Patch Radar (https://patchblox.com/security/patch-radar). Patchblox finds out-of-date software on Windows, macOS and Linux and updates it through release rings: https://patchblox.com/demo Free to use with attribution: show "Data: Patchblox Patch Radar" with a link to https://patchblox.com/security/patch-radar. Terms, including what needs a written agreement: https://patchblox.com/security/patch-radar/use-the-data Product names, logos and trademarks shown on Patch Radar belong to their respective owners. They are used only to identify the software each security fix applies to and to help readers find their platform. Their use does not imply any affiliation with, or endorsement by, those owners, and Patchblox is not affiliated with any of them.