{"id":4160835,"name":"linux-loader","ecosystem":"cargo","description":"A Linux kernel image loading crate.","homepage":"https://github.com/rust-vmm/linux-loader","licenses":"Apache-2.0 AND BSD-3-Clause","normalized_licenses":["Apache-2.0","BSD-3-Clause"],"repository_url":"https://github.com/rust-vmm/linux-loader","keywords_array":["kernel"],"namespace":null,"versions_count":17,"first_release_published_at":"2019-02-19T09:19:40.372Z","latest_release_published_at":"2025-11-20T13:22:53.278Z","latest_release_number":"0.13.2","last_synced_at":"2026-04-15T10:41:05.271Z","created_at":"2022-04-12T17:50:56.064Z","updated_at":"2026-04-15T10:41:05.271Z","registry_url":"https://crates.io/crates/linux-loader/","install_command":"cargo install linux-loader","documentation_url":"https://docs.rs/linux-loader/","metadata":{"categories":[]},"repo_metadata":{"id":40004219,"uuid":"178826846","full_name":"rust-vmm/linux-loader","owner":"rust-vmm","description":"Linux kernel loader","archived":false,"fork":false,"pushed_at":"2024-08-06T07:32:42.000Z","size":7089,"stargazers_count":177,"open_issues_count":16,"forks_count":54,"subscribers_count":25,"default_branch":"main","last_synced_at":"2024-08-06T09:33:59.772Z","etag":null,"topics":[],"latest_commit_sha":null,"homepage":null,"language":"Rust","has_issues":true,"has_wiki":null,"has_pages":null,"mirror_url":null,"source_name":null,"license":"apache-2.0","status":null,"scm":"git","pull_requests_enabled":true,"icon_url":"https://github.com/rust-vmm.png","metadata":{"files":{"readme":"README.md","changelog":"CHANGELOG.md","contributing":null,"funding":null,"license":"LICENSE-APACHE","code_of_conduct":null,"threat_model":null,"audit":null,"citation":null,"codeowners":"CODEOWNERS","security":null,"support":null,"governance":null,"roadmap":null,"authors":null,"dei":null,"publiccode":null,"codemeta":null}},"created_at":"2019-04-01T09:12:00.000Z","updated_at":"2024-08-06T07:32:42.000Z","dependencies_parsed_at":"2023-10-03T16:27:45.452Z","dependency_job_id":"5377310b-daf6-47a8-9e87-5b19526ba368","html_url":"https://github.com/rust-vmm/linux-loader","commit_stats":{"total_commits":175,"total_committers":29,"mean_commits":"6.0344827586206895","dds":0.7485714285714286,"last_synced_commit":"ef542d49173498f3cdf31af027872373aa638fbb"},"previous_names":[],"tags_count":12,"template":false,"template_full_name":null,"repository_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/rust-vmm%2Flinux-loader","tags_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/rust-vmm%2Flinux-loader/tags","releases_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/rust-vmm%2Flinux-loader/releases","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/rust-vmm%2Flinux-loader/manifests","owner_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners/rust-vmm","download_url":"https://codeload.github.com/rust-vmm/linux-loader/tar.gz/refs/heads/main","host":{"name":"GitHub","url":"https://github.com","kind":"github","repositories_count":217761811,"owners_count":16226274,"icon_url":"https://github.com/github.png","version":null,"created_at":"2022-05-30T11:31:42.601Z","updated_at":"2022-07-04T15:15:14.044Z","host_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub","repositories_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories","repository_names_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repository_names","owners_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners"},"owner_record":{"login":"rust-vmm","name":"rust-vmm","uuid":"46028664","kind":"organization","description":"","email":"rust-vmm@lists.opendev.org","website":null,"location":null,"twitter":null,"company":null,"icon_url":"https://avatars.githubusercontent.com/u/46028664?v=4","repositories_count":34,"last_synced_at":"2024-04-17T16:59:53.687Z","metadata":{"has_sponsors_listing":false},"html_url":"https://github.com/rust-vmm","funding_links":[],"total_stars":2434,"followers":482,"following":0,"created_at":"2022-11-13T05:16:46.451Z","updated_at":"2024-04-17T17:00:00.074Z","owner_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners/rust-vmm","repositories_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners/rust-vmm/repositories"},"tags":[{"name":"v0.11.0","sha":"0f0e99745e502edd47665fc9e1daa6febdfa2987","kind":"commit","published_at":"2024-01-22T16:04:19.000Z","download_url":"https://codeload.github.com/rust-vmm/linux-loader/tar.gz/v0.11.0","html_url":"https://github.com/rust-vmm/linux-loader/releases/tag/v0.11.0","dependencies_parsed_at":null,"dependency_job_id":null,"tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/rust-vmm%2Flinux-loader/tags/v0.11.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/rust-vmm%2Flinux-loader/tags/v0.11.0/manifests"},{"name":"v0.10.0","sha":"eedcf5763cdede4b06eb3d81b31113baea68398e","kind":"commit","published_at":"2023-10-16T10:21:10.000Z","download_url":"https://codeload.github.com/rust-vmm/linux-loader/tar.gz/v0.10.0","html_url":"https://github.com/rust-vmm/linux-loader/releases/tag/v0.10.0","dependencies_parsed_at":null,"dependency_job_id":null,"tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/rust-vmm%2Flinux-loader/tags/v0.10.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/rust-vmm%2Flinux-loader/tags/v0.10.0/manifests"},{"name":"linux-loader-v0.9.0","sha":"004366d401df6f1e2a1281791daf2ba4b7fb9778","kind":"tag","published_at":"2023-05-03T13:21:04.000Z","download_url":"https://codeload.github.com/rust-vmm/linux-loader/tar.gz/linux-loader-v0.9.0","html_url":"https://github.com/rust-vmm/linux-loader/releases/tag/linux-loader-v0.9.0","dependencies_parsed_at":null,"dependency_job_id":null,"tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/rust-vmm%2Flinux-loader/tags/linux-loader-v0.9.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/rust-vmm%2Flinux-loader/tags/linux-loader-v0.9.0/manifests"},{"name":"v0.8.1","sha":"e1dccddca2f269f880c877e584d36ad7c5c0b4df","kind":"tag","published_at":"2022-12-07T17:15:01.000Z","download_url":"https://codeload.github.com/rust-vmm/linux-loader/tar.gz/v0.8.1","html_url":"https://github.com/rust-vmm/linux-loader/releases/tag/v0.8.1","dependencies_parsed_at":null,"dependency_job_id":null,"tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/rust-vmm%2Flinux-loader/tags/v0.8.1","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/rust-vmm%2Flinux-loader/tags/v0.8.1/manifests"},{"name":"v0.8.0","sha":"8a6eed8556987a46e95f2dfdf6fdb93a05ee457c","kind":"tag","published_at":"2022-11-14T16:31:57.000Z","download_url":"https://codeload.github.com/rust-vmm/linux-loader/tar.gz/v0.8.0","html_url":"https://github.com/rust-vmm/linux-loader/releases/tag/v0.8.0","dependencies_parsed_at":null,"dependency_job_id":null,"tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/rust-vmm%2Flinux-loader/tags/v0.8.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/rust-vmm%2Flinux-loader/tags/v0.8.0/manifests"},{"name":"v0.7.0","sha":"ad0a0073da776322ad809632afcc3d2864cbe0d4","kind":"tag","published_at":"2022-10-21T08:18:31.000Z","download_url":"https://codeload.github.com/rust-vmm/linux-loader/tar.gz/v0.7.0","html_url":"https://github.com/rust-vmm/linux-loader/releases/tag/v0.7.0","dependencies_parsed_at":null,"dependency_job_id":null,"tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/rust-vmm%2Flinux-loader/tags/v0.7.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/rust-vmm%2Flinux-loader/tags/v0.7.0/manifests"},{"name":"v0.6.0","sha":"21d0180647ba596ef68a126c1c576b180e9133ed","kind":"tag","published_at":"2022-09-23T13:40:18.000Z","download_url":"https://codeload.github.com/rust-vmm/linux-loader/tar.gz/v0.6.0","html_url":"https://github.com/rust-vmm/linux-loader/releases/tag/v0.6.0","dependencies_parsed_at":null,"dependency_job_id":null,"tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/rust-vmm%2Flinux-loader/tags/v0.6.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/rust-vmm%2Flinux-loader/tags/v0.6.0/manifests"},{"name":"v0.5.0","sha":"003b7cd7f4a9a151b515d7d493bdb9f4cca26bed","kind":"tag","published_at":"2022-09-08T08:12:08.000Z","download_url":"https://codeload.github.com/rust-vmm/linux-loader/tar.gz/v0.5.0","html_url":"https://github.com/rust-vmm/linux-loader/releases/tag/v0.5.0","dependencies_parsed_at":null,"dependency_job_id":null,"tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/rust-vmm%2Flinux-loader/tags/v0.5.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/rust-vmm%2Flinux-loader/tags/v0.5.0/manifests"},{"name":"v0.4.0","sha":"9539d6dd21fe92f21f7cd25df65bf0911af80815","kind":"tag","published_at":"2021-09-23T15:55:29.000Z","download_url":"https://codeload.github.com/rust-vmm/linux-loader/tar.gz/v0.4.0","html_url":"https://github.com/rust-vmm/linux-loader/releases/tag/v0.4.0","dependencies_parsed_at":null,"dependency_job_id":null,"tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/rust-vmm%2Flinux-loader/tags/v0.4.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/rust-vmm%2Flinux-loader/tags/v0.4.0/manifests"},{"name":"show","sha":"9539d6dd21fe92f21f7cd25df65bf0911af80815","kind":"commit","published_at":"2021-09-23T15:31:29.000Z","download_url":"https://codeload.github.com/rust-vmm/linux-loader/tar.gz/show","html_url":"https://github.com/rust-vmm/linux-loader/releases/tag/show","dependencies_parsed_at":null,"dependency_job_id":null,"tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/rust-vmm%2Flinux-loader/tags/show","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/rust-vmm%2Flinux-loader/tags/show/manifests"},{"name":"v0.3.0","sha":"bee6b10b45ae1288d9e2ee7922bc9eac51112159","kind":"tag","published_at":"2021-02-25T10:05:23.000Z","download_url":"https://codeload.github.com/rust-vmm/linux-loader/tar.gz/v0.3.0","html_url":"https://github.com/rust-vmm/linux-loader/releases/tag/v0.3.0","dependencies_parsed_at":null,"dependency_job_id":null,"tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/rust-vmm%2Flinux-loader/tags/v0.3.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/rust-vmm%2Flinux-loader/tags/v0.3.0/manifests"},{"name":"v0.2.0","sha":"726360bb2c1eeab1176ae48ad10c549d0be2ea37","kind":"tag","published_at":"2020-08-12T15:30:27.000Z","download_url":"https://codeload.github.com/rust-vmm/linux-loader/tar.gz/v0.2.0","html_url":"https://github.com/rust-vmm/linux-loader/releases/tag/v0.2.0","dependencies_parsed_at":null,"dependency_job_id":null,"tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/rust-vmm%2Flinux-loader/tags/v0.2.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/rust-vmm%2Flinux-loader/tags/v0.2.0/manifests"}]},"repo_metadata_updated_at":"2024-09-06T10:05:02.261Z","dependent_packages_count":0,"downloads":2872478,"downloads_period":"total","dependent_repos_count":166,"rankings":{"downloads":2.0509915014164304,"dependent_repos_count":3.0458923512747873,"dependent_packages_count":36.13654405927494,"stargazers_count":11.94032105760151,"forks_count":8.723346379943482,"docker_downloads_count":3.2880461490772452,"average":10.864190249764732},"purl":"pkg:cargo/linux-loader","advisories":[{"uuid":"GSA_kwCzR0hTQS01MmgyLW0yY2YtOWpoNs4AAwRz","url":"https://github.com/advisories/GHSA-52h2-m2cf-9jh6","title":"linux-loader reading beyond EOF could lead to infinite loop","description":"### Impact\nThe linux-loader crate used the offsets and sizes provided in the ELF headers to determine the offsets to read from. If those offsets pointed beyond the end of the file this could lead to an infinite loop. Virtual Machine Monitors using the `linux-loader` crate could enter an infinite loop if the ELF header of the kernel they are loading was modified in a malicious manner.\n\n### Patches\nThe issue has been addressed in 0.8.1\n\n### Workarounds\nThe issue can be mitigated by ensuring that only trusted kernel images are loaded or by verifying that the headers to not point beyond the end of the file.\n\n### References\n\nSee: https://github.com/rust-vmm/linux-loader/pull/125\n","origin":"UNSPECIFIED","severity":"LOW","published_at":"2022-12-12T22:35:41.000Z","withdrawn_at":null,"classification":"GENERAL","cvss_score":1.9,"cvss_vector":"CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:U/C:N/I:N/A:L","references":["https://github.com/rust-vmm/linux-loader/security/advisories/GHSA-52h2-m2cf-9jh6","https://github.com/rust-vmm/linux-loader/commit/a44f152da4f38c538ed492b1efa8515be2047db2","https://nvd.nist.gov/vuln/detail/CVE-2022-23523","https://github.com/rust-vmm/linux-loader/pull/125","https://github.com/advisories/GHSA-52h2-m2cf-9jh6"],"source_kind":"github","identifiers":["GHSA-52h2-m2cf-9jh6","CVE-2022-23523"],"repository_url":"https://github.com/rust-vmm/linux-loader","blast_radius":0.0,"created_at":"2022-12-21T16:11:45.561Z","updated_at":"2026-04-05T20:09:24.953Z","epss_percentage":0.00045,"epss_percentile":0.1381,"api_url":"https://advisories.ecosyste.ms/api/v1/advisories/GSA_kwCzR0hTQS01MmgyLW0yY2YtOWpoNs4AAwRz","html_url":"https://advisories.ecosyste.ms/advisories/GSA_kwCzR0hTQS01MmgyLW0yY2YtOWpoNs4AAwRz","packages":[{"ecosystem":"cargo","package_name":"linux-loader","versions":[{"first_patched_version":"0.8.1","vulnerable_version_range":"\u003c 0.8.1"}],"purl":"pkg:cargo/linux-loader"}],"related_packages_url":"https://advisories.ecosyste.ms/api/v1/advisories/GSA_kwCzR0hTQS01MmgyLW0yY2YtOWpoNs4AAwRz/related_packages","related_advisories":[]}],"docker_usage_url":"https://docker.ecosyste.ms/usage/cargo/linux-loader","docker_dependents_count":31,"docker_downloads_count":23282484,"usage_url":"https://repos.ecosyste.ms/usage/cargo/linux-loader","dependent_repositories_url":"https://repos.ecosyste.ms/api/v1/usage/cargo/linux-loader/dependencies","status":null,"funding_links":[],"critical":null,"issue_metadata":{"last_synced_at":"2024-07-13T14:03:42.506Z","issues_count":23,"pull_requests_count":111,"avg_time_to_close_issue":11852232.6875,"avg_time_to_close_pull_request":1495492.6476190477,"issues_closed_count":16,"pull_requests_closed_count":105,"pull_request_authors_count":33,"issue_authors_count":11,"avg_comments_per_issue":1.2173913043478262,"avg_comments_per_pull_request":0.954954954954955,"merged_pull_requests_count":84,"bot_issues_count":0,"bot_pull_requests_count":48,"past_year_issues_count":0,"past_year_pull_requests_count":23,"past_year_avg_time_to_close_issue":null,"past_year_avg_time_to_close_pull_request":802554.4,"past_year_issues_closed_count":0,"past_year_pull_requests_closed_count":20,"past_year_pull_request_authors_count":11,"past_year_issue_authors_count":0,"past_year_avg_comments_per_issue":null,"past_year_avg_comments_per_pull_request":0.6521739130434783,"past_year_bot_issues_count":0,"past_year_bot_pull_requests_count":13,"past_year_merged_pull_requests_count":19,"issues_url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/repositories/rust-vmm%2Flinux-loader/issues","maintainers":[{"login":"andreeaflorescu","count":26,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/andreeaflorescu"},{"login":"aghecenco","count":4,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/aghecenco"},{"login":"roypat","count":2,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/roypat"},{"login":"gsserge","count":1,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/gsserge"},{"login":"ShadowCurse","count":1,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/ShadowCurse"}],"active_maintainers":[{"login":"roypat","count":1,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/roypat"},{"login":"ShadowCurse","count":1,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/ShadowCurse"}]},"versions_url":"https://packages.ecosyste.ms/api/v1/registries/crates.io/packages/linux-loader/versions","version_numbers_url":"https://packages.ecosyste.ms/api/v1/registries/crates.io/packages/linux-loader/version_numbers","dependent_packages_url":"https://packages.ecosyste.ms/api/v1/registries/crates.io/packages/linux-loader/dependent_packages","related_packages_url":"https://packages.ecosyste.ms/api/v1/registries/crates.io/packages/linux-loader/related_packages","codemeta_url":"https://packages.ecosyste.ms/api/v1/registries/crates.io/packages/linux-loader/codemeta","maintainers":[{"uuid":"37110","login":"andreeaflorescu","name":"Andreea Florescu","email":null,"url":"https://github.com/andreeaflorescu","packages_count":18,"html_url":"https://crates.io/users/andreeaflorescu","role":null,"created_at":"2023-06-04T14:10:31.477Z","updated_at":"2023-06-04T14:10:31.477Z","packages_url":"https://packages.ecosyste.ms/api/v1/registries/crates.io/maintainers/andreeaflorescu/packages"},{"uuid":"79784","login":"JonathanWoollett-Light","name":"Jonathan Woollett-Light","email":null,"url":"https://github.com/JonathanWoollett-Light","packages_count":43,"html_url":"https://crates.io/users/JonathanWoollett-Light","role":null,"created_at":"2023-06-04T14:10:33.235Z","updated_at":"2023-06-04T14:10:33.235Z","packages_url":"https://packages.ecosyste.ms/api/v1/registries/crates.io/maintainers/JonathanWoollett-Light/packages"},{"uuid":"82989","login":"jiangliu","name":"Jiang Liu","email":null,"url":"https://github.com/jiangliu","packages_count":28,"html_url":"https://crates.io/users/jiangliu","role":null,"created_at":"2023-06-04T14:10:33.588Z","updated_at":"2023-06-04T14:10:33.588Z","packages_url":"https://packages.ecosyste.ms/api/v1/registries/crates.io/maintainers/jiangliu/packages"},{"uuid":"35756","login":"sameo","name":"Samuel Ortiz","email":null,"url":"https://github.com/sameo","packages_count":5,"html_url":"https://crates.io/users/sameo","role":null,"created_at":"2022-11-07T21:28:24.628Z","updated_at":"2022-11-07T21:28:24.628Z","packages_url":"https://packages.ecosyste.ms/api/v1/registries/crates.io/maintainers/sameo/packages"},{"uuid":"76565","login":"aghecenco","name":"Alexandra Iordache","email":null,"url":"https://github.com/aghecenco","packages_count":2,"html_url":"https://crates.io/users/aghecenco","role":null,"created_at":"2023-06-04T14:10:32.959Z","updated_at":"2023-06-04T14:10:32.959Z","packages_url":"https://packages.ecosyste.ms/api/v1/registries/crates.io/maintainers/aghecenco/packages"},{"uuid":"99643","login":"lauralt","name":"Laura Loghin","email":null,"url":"https://github.com/lauralt","packages_count":9,"html_url":"https://crates.io/users/lauralt","role":null,"created_at":"2023-06-04T14:10:34.241Z","updated_at":"2023-06-04T14:10:34.241Z","packages_url":"https://packages.ecosyste.ms/api/v1/registries/crates.io/maintainers/lauralt/packages"},{"uuid":"186043","login":"roypat","name":"Patrick Roy","email":null,"url":"https://github.com/roypat","packages_count":12,"html_url":"https://crates.io/users/roypat","role":null,"created_at":"2023-06-04T14:10:34.522Z","updated_at":"2023-06-04T14:10:34.522Z","packages_url":"https://packages.ecosyste.ms/api/v1/registries/crates.io/maintainers/roypat/packages"}]}