CVE-2025-37939
kernel: libbpf: Fix accessing BTF.ext core_relo header
Loading…
Severity
UnknownRed Hat Product Security
CVSS
Review impact separately from score.
Published · May 20, 2025
Updated · June 30, 2026
Description
In the Linux kernel, the following vulnerability has been resolved:
libbpf: Fix accessing BTF.ext core_relo header
Update btf_ext_parse_info() to ensure the core_relo header is present before reading its fields. This avoids a potential buffer read overflow reported by the OSS Fuzz project.
Mitigation
No mitigation is specified in collected source.
CVSS / CWE
CWE not specified