Skip to content
OpenAdvisories
Medium DLA-4137-1 2 CVEs

libbpf - security update

Published Apr 24, 2025 · Updated Mar 9, 2026

Ecosystem: Debian

Fixed packages 1

ReleasePackageFixed in
Debian · 11 libbpf 0.3-2+deb11u1

Vulnerabilities 2

  • Medium 5.5
    CVE-2022-3534

    Linux Kernel libbpf btf_dump.c btf_dump_name_dups use after free

    A vulnerability has been found in Linux Kernel up to 5.10.162/5.15.85/6.0.15/6.1.1. The impacted element is the function btf_dump_name_dups of the file tools/lib/bpf/btf_dump.c of the component libbpf. The manipulation leads to use after free. Upgrading to ve…

    Linux kernel libbpf libbpf Linux Debian Ubuntu
  • Low 3.5
    CVE-2022-3606

    Linux Kernel BPF libbpf.c find_prog_by_sec_insn null pointer dereference

    A vulnerability was found in Linux Kernel. It has been classified as problematic. This affects the function find_prog_by_sec_insn of the file tools/lib/bpf/libbpf.c of the component BPF. The manipulation leads to null pointer dereference. It is recommended to…

    Linux kernel kernel libbpf Linux Debian Ubuntu Azure Linux