OESA-2025-1576

See a problem?
Please try reporting it to the source first.
Source
https://www.openeuler.org/en/security/security-bulletins/detail/?id=openEuler-SA-2025-1576
Import Source
https://repo.openeuler.org/security/data/osv/OESA-2025-1576.json
JSON Data
https://api.osv.dev/v1/vulns/OESA-2025-1576
Upstream
Published
2025-05-30T11:08:40Z
Modified
2026-08-18T01:17:59Z
Severity
  • 5.5 (Medium) CVSS_V3 - CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H CVSS Calculator
Summary
libbpf security update
Details

A mirror of bpf-next linux tree bpf-next/tools/lib/bpf directory plus its supporting header files. The version of the package reflects the version of ABI.

Security Fix(es):

In the Linux kernel, the following vulnerability has been resolved:

libbpf: Use OPTS_SET() macro in bpf_xdp_query()

When the feature_flags and xdp_zc_max_segs fields were added to the libbpf bpf_xdp_query_opts, the code writing them did not use the OPTS_SET() macro. This causes libbpf to write to those fields unconditionally, which means that programs compiled against an older version of libbpf (with a smaller size of the bpf_xdp_query_opts struct) will have its stack corrupted by libbpf writing out of bounds.

The patch adding the feature_flags field has an early bail out if the feature_flags field is not part of the opts struct (via the OPTS_HAS) macro, but the patch adding xdp_zc_max_segs does not. For consistency, this fix just changes the assignments to both fields to use the OPTS_SET() macro.(CVE-2024-27050)

Database specific 
{
    "severity": "Medium"
}
References

Affected packages

openEuler:24.03-LTS / libbpf

Package

Name
libbpf
Purl
pkg:rpm/openEuler/libbpf&distro=openEuler-24.03-LTS

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0 Unknown introduced version / All previous versions are affected
Fixed
1.2.2-9.oe2403

Ecosystem specific 

{
    "aarch64": [
        "libbpf-1.2.2-9.oe2403.aarch64.rpm",
        "libbpf-debuginfo-1.2.2-9.oe2403.aarch64.rpm",
        "libbpf-debugsource-1.2.2-9.oe2403.aarch64.rpm",
        "libbpf-devel-1.2.2-9.oe2403.aarch64.rpm",
        "libbpf-static-1.2.2-9.oe2403.aarch64.rpm"
    ],
    "src": [
        "libbpf-1.2.2-9.oe2403.src.rpm"
    ],
    "x86_64": [
        "libbpf-1.2.2-9.oe2403.x86_64.rpm",
        "libbpf-debuginfo-1.2.2-9.oe2403.x86_64.rpm",
        "libbpf-debugsource-1.2.2-9.oe2403.x86_64.rpm",
        "libbpf-devel-1.2.2-9.oe2403.x86_64.rpm",
        "libbpf-static-1.2.2-9.oe2403.x86_64.rpm"
    ]
}

Database specific

source 
"https://repo.openeuler.org/security/data/osv/OESA-2025-1576.json"