CVE-2021-45940: Libbpf Project Libbpf

Medium severity, CVSS 6.5. EPSS: 1.2% chance of exploitation in the next 30 days.

libbpf 0.6.0 and 0.6.1 has a heap-based buffer overflow (4 bytes) in __bpf_object__open (called from bpf_object__open_mem and bpf-object-fuzzer.c).

Affected products

• Libbpf Project Libbpf: version 0.6.0 only; version 0.6.1 only

Published 2022-01-01. Last modified 2026-06-17.