CVE-2025-29481

MEDIUM

6.2

Descricao

Buffer Overflow vulnerability in libbpf 1.5.0 allows a local attacker to execute arbitrary code via the bpf_object__init_prog` function of libbpf. This has been disputed by third parties who assert that "no one in their sane mind should be passing untrusted ELF files into libbpf while running under root."

Detalhes CVE

Pontuacao CVSS v3.16.2

SeveridadeMEDIUM

Vetor CVSSCVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

Vetor de ataqueLOCAL

ComplexidadeLOW

Privilegios necessariosNONE

Interacao do usuarioNONE

Publicado4/7/2025

Ultima modificacao2/25/2026

Fontenvd

Avistamentos honeypot0

Produtos afetados

libbpf_project:libbpf

Fraquezas (CWE)

CWE-120

Referencias

https://github.com/lmarch2/poc/blob/main/libbpf/libbpf.md(cve@mitre.org)

https://github.com/lmarch2/poc/blob/main/libbpf/libbpf.md(134c704f-9b21-4f2e-91b3-4a467353bcc0)

Correlacoes IOC

Sem correlacoes registradas

This product uses data from the NVD API but is not endorsed or certified by the NVD.