K000156983: libbpf vulnerability CVE-2025-29481

Security Advisory Description Buffer Overflow vulnerability in libbpf 1.5.0 allows a local attacker to execute arbitrary code via the bpfobjectinitprog function of libbpf. CVE-2025-29481 Impact Exploitation of this vulnerability could allow an attacker to access sensitive information stored or...

Linux Distros Unpatched Vulnerability : CVE-2022-50450

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - libbpf: Use elfgetshdrnum instead of eshnum This commit replace eshnum with the elfgetshdrnum helper to fix two oss-fuzz-reported heap-buffer overflow in...

Unity Linux 20.1070e Security Update: kernel (UTSA-2025-414362)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-414362 advisory. A vulnerability classified as critical has been found in Linux Kernel. Affected is the function btfdumpnamedups of the file tools/lib/bpf/btfdump.c of the component...

EUVD-2025-10438

Malicious code in bioql PyPI...

EUVD-2021-32649

Malicious code in bioql PyPI...

EUVD-2022-42900

Malicious code in bioql PyPI...

EUVD-2025-15850

Malicious code in bioql PyPI...

EUVD-2021-32650

Malicious code in bioql PyPI...

EUVD-2025-31995

Malicious code in bioql PyPI...

Heap-based Buffer Overflow

Overview Affected versions of this package are vulnerable to Heap-based Buffer Overflow due to direct use of the eshnum field. An attacker can cause a heap buffer overflow by providing a crafted ELF file with manipulated section header values. Remediation Upgrade libbpf to version 1.1.0 or higher...

CVE-2022-50450

Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority...

CVE-2022-50450

...

CVE-2023-53221

In the Linux kernel, the following vulnerability has been resolved: bpf: Fix memleak due to fentry attach failure If it fails to attach fentry, the allocated bpf trampoline image will be left in the system. That can be verified by checking /proc/kallsyms. This meamleak can be verified by a simple...

Linux Distros Unpatched Vulnerability : CVE-2022-49030

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - In the Linux kernel, the following vulnerability has been resolved: libbpf: Handle size overflow for ringbuf mmap The maximum size of ringbuf is 2GB on x86-64...

Linux Distros Unpatched Vulnerability : CVE-2024-27050

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - In the Linux kernel, the following vulnerability has been resolved: libbpf: Use OPTSSET macro in bpfxdpquery When the featureflags and xdpzcmaxsegs fields were...

Linux Distros Unpatched Vulnerability : CVE-2024-38574

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - In the Linux kernel, the following vulnerability has been resolved: libbpf: Prevent null-pointer dereference when prog to load has no BTF In bpfobjecloadprog,...

Linux Distros Unpatched Vulnerability : CVE-2021-47417

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - In the Linux kernel, the following vulnerability has been resolved: libbpf: Fix memory leak in strset Free struct strset itself, not just its internal parts...

Linux Distros Unpatched Vulnerability : CVE-2025-37939

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - In the Linux kernel, the following vulnerability has been resolved: libbpf: Fix accessing BTF.ext corerelo header Update btfextparseinfo to ensure the corerelo...

Astra Linux – Vulnerability in libbpf

The vulnerability of the BPF Libbpf loader library is related to pointer dereferencing errors. Exploiting this vulnerability allows an attacker to cause a service failure...

Astra Linux – Vulnerability in libbpf

The vulnerability in the src/libbpf.c component of the BPF loader library in Libbpf is related to pointer dereferencing errors. Exploiting this vulnerability allows an attacker to cause a service failure...