Every CVE Search/ Get API key

CVE-2025-29481

Buffer Overflow vulnerability in libbpf 1.5.0 allows a local attacker to execute arbitrary code...

6.2 MediumFix availableDisputed

Buffer Overflow vulnerability in libbpf 1.5.0 allows a local attacker to execute arbitrary code via the bpf_object__init_prog` function of libbpf. This has been disputed by third parties who assert that "no one in their sane mind should be passing untrusted ELF files into libbpf while running under root."

Attack profile

How easy it is to exploit

Attack vector
Local
Complexity
Low
Privileges needed
None
User interaction
None

What an attacker can affect

Confidentiality
None
Integrity
None
Availability
High

Exploit likelihood

0.24%Up 0.2 points since Apr 8, 2025
90%50%10%1%

What each source reports

CVE List Score used 6.2

Buffer Overflow vulnerability in libbpf 1.5.0 allows a local attacker to execute arbitrary code via the bpf_object__init_prog` function of libbpf. This has been disputed by third parties who assert that "no one in their sane mind should be passing untrusted ELF files into libbpf while running under root."

Record
CVE-2025-29481
CVSS 3.1
6.2 MediumCVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
Weakness
CWE-120
Updated
2026-11-02
EUVDEUVD-2025-10438 6.2

Buffer Overflow vulnerability in libbpf 1.5.0 allows a local attacker to execute arbitrary code via the bpf_object__init_prog` function of libbpf. This has been disputed by third parties who assert that "no one in their sane mind should be passing untrusted ELF files into libbpf while running under root."

Record
EUVD-2025-10438
CVSS 3.1
6.2 MediumCVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
Updated
2026-11-02
GitHub AdvisoriesGHSA-3ch3-mpx2-hj74 6.2

Buffer Overflow vulnerability in libbpf 1.5.0 allows a local attacker to execute arbitrary code...

Buffer Overflow vulnerability in libbpf 1.5.0 allows a local attacker to execute arbitrary code via the bpf_object__init_prog` function of libbpf.

Record
GHSA-3ch3-mpx2-hj74
CVSS 3.1
6.2 MediumCVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
Weakness
CWE-120
Updated
2026-11-02
NVD 6.2

Buffer Overflow vulnerability in libbpf 1.5.0 allows a local attacker to execute arbitrary code via the bpf_object__init_prog` function of libbpf. This has been disputed by third parties who assert that "no one in their sane mind should be passing untrusted ELF files into libbpf while running under root."

Record
CVE-2025-29481
CVSS 3.1
6.2 MediumCVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
Weakness
CWE-120
Updated
2026-11-02
OSV 6.2

Buffer Overflow vulnerability in libbpf 1.5.0 allows a local attacker to execute arbitrary code via the bpf_object__init_prog` function of libbpf. This has been disputed by third parties who assert that "no one in their sane mind should be passing untrusted ELF files into libbpf while running under root."

Record
CVE-2025-29481
CVSS 3.1
6.2 MediumCVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
Updated
2026-11-02
OSVDEBIAN-CVE-2025-29481 6.2

Buffer Overflow vulnerability in libbpf 1.5.0 allows a local attacker to execute arbitrary code via the bpf_object__init_prog` function of libbpf. This has been disputed by third parties who assert that "no one in their sane mind should be passing untrusted ELF files into libbpf while running under root."

Record
DEBIAN-CVE-2025-29481
CVSS 3.1
6.2 MediumCVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
Updated
2026-11-02
Show 7 moreShow less
OSVUBUNTU-CVE-2025-29481 6.2

Buffer Overflow vulnerability in libbpf 1.5.0 allows a local attacker to execute arbitrary code via the bpf_object__init_prog` function of libbpf. This has been disputed by third parties who assert that "no one in their sane mind should be passing untrusted ELF files into libbpf while running under root."

Record
UBUNTU-CVE-2025-29481
CVSS 3.1
6.2 MediumCVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
Updated
2026-11-02
OSVAZL-59719 No score

CVE-2025-29481 affecting package libbpf for versions less than 1.0.1-2

Buffer Overflow vulnerability in libbpf 1.5.0 allows a local attacker to execute arbitrary code via the bpf_object__init_prog` function of libbpf. This has been disputed by third parties who assert that "no one in their sane mind should be passing untrusted ELF files into libbpf while running under root."

Record
AZL-59719
Updated
2026-11-02
OSVAZL-59727 No score

CVE-2025-29481 affecting package libbpf for versions less than 1.2.2-2

Buffer Overflow vulnerability in libbpf 1.5.0 allows a local attacker to execute arbitrary code via the bpf_object__init_prog` function of libbpf. This has been disputed by third parties who assert that "no one in their sane mind should be passing untrusted ELF files into libbpf while running under root."

Record
AZL-59727
Updated
2026-11-05
OSVAZL-59737 No score

CVE-2025-29481 affecting package dwarves for versions less than 1.25-2

Buffer Overflow vulnerability in libbpf 1.5.0 allows a local attacker to execute arbitrary code via the bpf_object__init_prog` function of libbpf. This has been disputed by third parties who assert that "no one in their sane mind should be passing untrusted ELF files into libbpf while running under root."

Record
AZL-59737
Updated
2026-11-05
OSVAZL-59745 No score

CVE-2025-29481 affecting package bcc for versions less than 0.29.1-3

Buffer Overflow vulnerability in libbpf 1.5.0 allows a local attacker to execute arbitrary code via the bpf_object__init_prog` function of libbpf. This has been disputed by third parties who assert that "no one in their sane mind should be passing untrusted ELF files into libbpf while running under root."

Record
AZL-59745
Updated
2026-11-05
OSVAZL-61765 No score

CVE-2025-29481 affecting package pcp 6.3.2-1

Buffer Overflow vulnerability in libbpf 1.5.0 allows a local attacker to execute arbitrary code via the bpf_object__init_prog` function of libbpf. This has been disputed by third parties who assert that "no one in their sane mind should be passing untrusted ELF files into libbpf while running under root."

Record
AZL-61765
Updated
2026-11-05
OSVBIT-bpftool-2025-29481 No score

Buffer Overflow vulnerability in libbpf 1.5.0 allows a local attacker to execute arbitrary code via the bpf_object__init_prog` function of libbpf. This has been disputed by third parties who assert that "no one in their sane mind should be passing untrusted ELF files into libbpf while running under root."

Record
BIT-bpftool-2025-29481
Updated
2026-11-02

Affected products

Affected packages

Affected packages
PackageAffectedFixed
libbpf
Azure Linux:2
 before 1.0.1-2
1.0.1-2
libbpf
Azure Linux:3
 before 1.2.2-2
1.2.2-2
dwarves
Azure Linux:3
 before 1.25-2
1.25-2
bcc
Azure Linux:3
 before 0.29.1-3
0.29.1-3
pcp
Azure Linux:3
 through 6.3.2-1 None known
bpftool
Bitnami
 1.5.0 up to 7.4.0
7.4.0
libbpf
Debian:12
 All versions, plus listed versions
1.1.0-11.1.2-0+deb12u11.2.0-11.2.2-11.2.2-2
Show 20 moreShow less
1.3.0-11.3.0-21.4.1-11.4.2-11.4.3-11.4.5-11.4.6-11.4.6-1~bpo12+11.5.0-11.5.0-1~exp11.5.0-21.5.0-2~exp11.5.0-31.6.1-11.6.1-1~exp11.6.2-11.6.3-11.6.3-1~exp11.7.0-11.7.0-1~exp1
 None known
libbpf
Debian:13
 before 1.5.0-3
1.5.0-3
libbpf
Debian:14
 before 1.5.0-3
1.5.0-3
dwarves-dfsg
Ubuntu:16.04:LTS
 All versions, plus listed versions
1.10-2ubuntu11.10-2.1
 None known
Show 5 moreShow less
Affected packages
PackageAffectedFixed
dwarves-dfsg
Ubuntu:Pro:18.04:LTS
 All versions, plus listed versions
1.10-2.11.10-2.1build11.21-0ubuntu1~18.041.21-0ubuntu1~18.04.1+esm1
 None known
dwarves-dfsg
Ubuntu:20.04:LTS
 All versions, plus listed versions
1.15-11.15-21.21-0ubuntu1~20.041.21-0ubuntu1~20.04.1
 None known
libbpf
Ubuntu:Pro:20.04:LTS
 All versions, plus listed versions
0.5.0-1~ubuntu20.04.10.5.0-1~ubuntu20.04.1+esm1
 None known
libbpf
Ubuntu:22.04:LTS
 All versions, plus listed versions
0.4.0-1ubuntu10.5.0-10.5.0-1ubuntu22.04.1
 None known
libbpf
Ubuntu:24.04:LTS
 All versions, plus listed versions
1.2.2-21.3.0-21.3.0-2build11.3.0-2build2
 None known

History

History
RecordedChangedSources
factsOSV
first indexedCVE List, EUVD, GitHub Advisories, NVD, OSV

Dates are when Every CVE recorded each change. Upstream dates may differ.

In short

CVE-2025-29481 is a medium vulnerability (CVSS 6.2) in Libbpf Project Libbpf, published April 7, 2025. Its validity is disputed. EPSS puts the chance of exploitation in the next 30 days at 0.24%, the 15th percentile. Fixed in libbpf 1.0.1-2.

References

Pages All vulnerabilities Browse Docs Sources Guide Get API key
MoveEnter Open