CVE-2025-29481: libbpf_project libbpf
Vulnerability summary
CVE-2025-29481 is a medium (CVSS 6.2) vulnerability in libbpf_project libbpf. EPSS estimates a 0.24% chance of exploitation in the next 30 days, higher than 15% of scored vulnerabilities. 1 public exploit is recorded.
Not severe (CVSS 6.2, local access); no exploitation reported by the 5 checked sources
Source freshness unavailable
How is this decided?Timeline
- 07-04-2025PublishedVulnerability first disclosed.
- 25-02-2026Last modifiedVulnerability information updated.
Description
Buffer Overflow vulnerability in libbpf 1.5.0 allows a local attacker to execute arbitrary code via the bpf_object__init_prog` function of libbpf. This has been disputed by third parties who assert that "no one in their sane mind should be passing untrusted ELF files into libbpf while running under root."
CVSS metrics
4 scores · 4 sources · 1 version- OSV · UbuntuEcosystem advisory · calculated6.2MediumCVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
- OSV · DebianEcosystem advisory · calculated6.2MediumCVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
- NVDNIST6.2MediumCVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
EPSS trend
Probability
0.24%
Chance of exploitation in the next 30 days
Percentile
15%
Versus all other CVEs
30-day change
No change 0.00 pp
From 0.24% on 04-10-2026
Known exploited
Compare KEV catalogs
CISA KEVNot in the CISA KEV catalog.
ENISA CNWNot in the ENISA CNW catalog.
CIRCLNot in the CIRCL catalog.
Public exploits
1 foundPoc
Maturity: poc
Weaknesses
CWE · root causeAffected systems
Known conditions: local access, no authentication, no user interaction (CVSS vector). Other conditions: not stated in public data.
Ubuntu2 products
- dwarves-dfsgAll versions (No fix recorded)
- libbpfAll versions (No fix recorded)
Debian1 product
- libbpfAll versions (No fix recorded) | < 1.5.0-3
Libbpf_project1 product
- libbpf1.5.0
3 vendors · 4 products
