CVE catalog

CVE-2025-29481

libbpf: CVE-2025-29481

[CVE catalog]

Severity
High · CVSS 7.3CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:L
Published
Source
[NVD] · [CVE record]
EPSS
0.24% · Oct 25, 2026

Buffer Overflow vulnerability in libbpf 1.5.0 allows a local attacker to execute arbitrary code via the bpf_object__init_prog` function of libbpf. This has been disputed by third parties who assert that "no one in their sane mind should be passing untrusted ELF files into libbpf while running under root."

Vulnerable and fixed packages

Distribution-reported package versions and fixes. These do not depend on matching against the OpenFactory package catalog.

DistributionPackageReleaseVersionStatus
Debianlibbpfsid1.7.0-1fixed
Debianlibbpfforky1.7.0-1fixed
Debianlibbpftrixie1.5.0-3fixed
Debianlibbpfbookworm1.1.2-0+deb12u1vulnerable
Ubuntudwarves-dfsg16.041.10-2ubuntu1vulnerable
Ubuntudwarves-dfsg16.041.10-2.1vulnerable
Ubuntudwarves-dfsgpro1.10-2.1vulnerable
Ubuntudwarves-dfsgpro1.10-2.1build1vulnerable
Ubuntudwarves-dfsgpro1.21-0ubuntu1~18.04vulnerable
Ubuntudwarves-dfsgpro1.21-0ubuntu1~18.04.1+esm1vulnerable
Ubuntudwarves-dfsg20.041.15-1vulnerable
Ubuntudwarves-dfsg20.041.15-2vulnerable
Ubuntudwarves-dfsg20.041.21-0ubuntu1~20.04vulnerable
Ubuntudwarves-dfsg20.041.21-0ubuntu1~20.04.1vulnerable
Ubuntulibbpfpro0.5.0-1~ubuntu20.04.1vulnerable
Ubuntulibbpfpro0.5.0-1~ubuntu20.04.1+esm1vulnerable
Ubuntulibbpf22.040.4.0-1ubuntu1vulnerable
Ubuntulibbpf22.040.5.0-1vulnerable
Ubuntulibbpf22.040.5.0-1ubuntu22.04.1vulnerable
Ubuntulibbpf24.041.2.2-2vulnerable
Ubuntulibbpf24.041.3.0-2vulnerable
Ubuntulibbpf24.041.3.0-2build1vulnerable
Ubuntulibbpf24.041.3.0-2build2vulnerable

Fixed-version evidence

DistributionPackageTypeReleaseFixed versionUrgencyOriginBugs
Debianlibbpfsourcesid1.5.0-3unimportantNot reported[1102672]
Debianlibbpfsourceforky1.5.0-3unimportantNot reported[1102672]
Debianlibbpfsourcetrixie1.5.0-3unimportantNot reported[1102672]
Debianlibbpfsourcebookworm(unfixed)unimportantNot reported[1102672]

[Debian bug #1102672]

OpenFactory catalog packages

[Debian 12 (Bookworm)]

  • [libbpf1]Affected

    Source package: [libbpf]

    Details (4)

    • 1:1.1.2-0+deb12u1 · amd64 · bookworm

      Affected

      dsa · libbpf · debian · bookworm; dsa · libbpf · debian · 12

    • 1:1.1.2-0+deb12u1 · arm64 · bookworm

      Affected

      dsa · libbpf · debian · bookworm; dsa · libbpf · debian · 12

    • 1:1.4.6-1~bpo12+1 · amd64 · bookworm-backports

      Affected

      dsa · libbpf · debian · bookworm; dsa · libbpf · debian · 12

    • 1:1.4.6-1~bpo12+1 · arm64 · bookworm-backports

      Affected

      dsa · libbpf · debian · bookworm; dsa · libbpf · debian · 12

  • [libbpf-dev]Affected

    Source package: [libbpf]

    Details (4)

    • 1:1.1.2-0+deb12u1 · amd64 · bookworm

      Affected

      dsa · libbpf · debian · bookworm; dsa · libbpf · debian · 12

    • 1:1.1.2-0+deb12u1 · arm64 · bookworm

      Affected

      dsa · libbpf · debian · bookworm; dsa · libbpf · debian · 12

    • 1:1.4.6-1~bpo12+1 · amd64 · bookworm-backports

      Affected

      dsa · libbpf · debian · bookworm; dsa · libbpf · debian · 12

    • 1:1.4.6-1~bpo12+1 · arm64 · bookworm-backports

      Affected

      dsa · libbpf · debian · bookworm; dsa · libbpf · debian · 12

[Debian 13 (Trixie)]

  • [libbpf1]Fixed

    Source package: [libbpf]

    Details (2)

    • 1:1.5.0-3 · amd64 · trixie

      Fixed · Fixed: 1.5.0-3

      dsa · libbpf · debian · 13

    • 1:1.5.0-3 · arm64 · trixie

      Fixed · Fixed: 1.5.0-3

      dsa · libbpf · debian · 13

  • [libbpf-dev]Fixed

    Source package: [libbpf]

    Details (2)

    • 1:1.5.0-3 · amd64 · trixie

      Fixed · Fixed: 1.5.0-3

      dsa · libbpf · debian · 13

    • 1:1.5.0-3 · arm64 · trixie

      Fixed · Fixed: 1.5.0-3

      dsa · libbpf · debian · 13

Observed:

References

[Debian Security Tracker] · [FIRST EPSS] · [OSV Package Vulnerability Database] · [Red Hat security advisories and VEX]