CVE-2023-54145

Name of the Vulnerable Software and Affected Versions Linux kernel (affected versions not specified)

Description The Linux kernel contains an issue where a fixed-size buffer of 1024 bytes in the verifier can be triggered by user-provided information, leading to a "verifier log line truncated" warning. This occurs because two pieces of user-provided data – BTF names and BTF.ext source code lines strings – can be arbitrarily sized. While the code continues to function, a portion of a single line of output may be truncated. The issue stems from an unnecessary check within the verifier log, which has been removed.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.