Linux · Security advisory · April 24, 2025

DLA-4137-1: libbpf security update

DLA-4137-1, released April 24, 2025, fixes 1 CVE in libbpf (version 0.3-2+deb11u1). None of them is reported as exploited. Patch Radar priority: High. The product is no longer supported.

HighUnsupported product
CVEs closed
1
None rated Critical
Exploited
0
None reported
Exploitation more likely
0
Vendor assessment
Highest EPSS
0.0096
61st percentile

Fixed package versions

ProductReleaseFixed in
libbpfDebian 11.6 (bullseye)0.3-2+deb11u1

CVEs this fix closes

PriorityCVETitleImpactCVSSEPSSExploitation
High CVE-2022-3534 libbpf: A vulnerability has been found in Linux Kernel up to 5.10.162/5.15.85/6.0.15/6.1.1 8.0 0.0096 None reported
Showing 1 to 1 of 1 1