CVE-2025-29481

MEDIUM

6.2

Description

Buffer Overflow vulnerability in libbpf 1.5.0 allows a local attacker to execute arbitrary code via the bpf_object__init_prog` function of libbpf. This has been disputed by third parties who assert that "no one in their sane mind should be passing untrusted ELF files into libbpf while running under root."

CVE Details

CVSS v3.1 Score6.2

SeverityMEDIUM

CVSS VectorCVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

Attack VectorLOCAL

ComplexityLOW

Privileges RequiredNONE

User InteractionNONE

Published4/7/2025

Last Modified2/25/2026

Sourcenvd

Honeypot Sightings0

Affected Products

libbpf_project:libbpf

Weaknesses (CWE)

CWE-120

References

https://github.com/lmarch2/poc/blob/main/libbpf/libbpf.md(cve@mitre.org)

https://github.com/lmarch2/poc/blob/main/libbpf/libbpf.md(134c704f-9b21-4f2e-91b3-4a467353bcc0)

IOC Correlations

No correlations recorded

This product uses data from the NVD API but is not endorsed or certified by the NVD.