Track vulnerabilities like this one.
Sign up free to get alerted when software you use is affected.
Rust 1.75.0-31 uploads may cause crashes
published 21 days ago
Summary
The Rust 1.75.0-31 package can mishandle specific server messages during a file upload, causing the application to stop working and potentially allowing an attacker to take control. This issue affects any system that uses this version of Rust for uploading data. Upgrade to a newer Rust version or apply the vendor’s security update right away.
What to do
The CVE record does not list a fixed version. Check the vendor's site or the advisory links below - a fix may already be released.
Affected software
| Ecosystem | Vendor | Product | Affected versions |
|---|---|---|---|
| Azure Linux:3 | azure | rust | <= 1.75.0-31 |
Original advisory text
CVE-2026-92392 affecting package rust 1.75.0-31
During an upload, curl mishandles HTTP/2 `RST_STREAM` received from the server
(with reason `HTTP_1_1_REQUIRED` or `REFUSED_STREAM`) leading to a use after
free of a `struct Curl_easy` object.
(with reason `HTTP_1_1_REQUIRED` or `REFUSED_STREAM`) leading to a use after
free of a `struct Curl_easy` object.
References
Timeline
Published14 Oct 2026
Updated17 Oct 2026
First seen17 Oct 2026
Sources
AZL-108486 · OSV
Track software like this
Free during beta