VULNERABILITY INTELLIGENCE

CVE-2025-29481

CVSS score6.2 MEDIUM
EPSS probability0.24%
CISA KEVNot currently listed
Published2025-04-07
Last modified2026-06-17
CVSS vectorCVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

Description

Buffer Overflow vulnerability in libbpf 1.5.0 allows a local attacker to execute arbitrary code via the bpf_object__init_prog` function of libbpf. This has been disputed by third parties who assert that "no one in their sane mind should be passing untrusted ELF files into libbpf while running under root."

Weakness classification

  • CWE-120: Buffer Copy without Checking Size of Input ('Classic Buffer Overflow')

Primary references