CVE-2025-29481

MEDIUM

6.2

Description

Buffer Overflow vulnerability in libbpf 1.5.0 allows a local attacker to execute arbitrary code via the bpf_object__init_prog` function of libbpf. This has been disputed by third parties who assert that "no one in their sane mind should be passing untrusted ELF files into libbpf while running under root."

Details CVE

Score CVSS v3.16.2

SeveriteMEDIUM

Vecteur CVSSCVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

Vecteur d'attaqueLOCAL

ComplexiteLOW

Privileges requisNONE

Interaction utilisateurNONE

Publie4/7/2025

Derniere modification2/25/2026

Sourcenvd

Observations honeypot0

Produits affectes

libbpf_project:libbpf

Faiblesses (CWE)

CWE-120

References

https://github.com/lmarch2/poc/blob/main/libbpf/libbpf.md(cve@mitre.org)

https://github.com/lmarch2/poc/blob/main/libbpf/libbpf.md(134c704f-9b21-4f2e-91b3-4a467353bcc0)

Correlations IOC

Aucune correlation enregistree

This product uses data from the NVD API but is not endorsed or certified by the NVD.