CVE-2023-54247

Name of the Vulnerable Software and Affected Versions Linux kernel (affected versions not specified)

Description The Linux kernel contains an issue where a warning was triggered in the btf type id size() function when processing certain BPF (Berkeley Packet Filter) types. Specifically, a warning occurred when btf attr.btf key type id was set to 1 (DECL TAG). The issue was identified by syzbot and did not represent a correctness problem, but rather an unnecessary warning. The fix silences the warning by adding DECL TAG to the btf type nosize() function, causing btf type id size() to return NULL earlier without triggering the warning. The vulnerable function is btf type id size().

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.