CVE-2023-54145
Severity CVSS v4.0:
Pending analysis
Type:
Unavailable / Other
Publication date:
24/12/2025
Last modified:
24/12/2025
Description
In the Linux kernel, the following vulnerability has been resolved:<br />
<br />
bpf: drop unnecessary user-triggerable WARN_ONCE in verifierl log<br />
<br />
It&#39;s trivial for user to trigger "verifier log line truncated" warning,<br />
as verifier has a fixed-sized buffer of 1024 bytes (as of now), and there are at<br />
least two pieces of user-provided information that can be output through<br />
this buffer, and both can be arbitrarily sized by user:<br />
- BTF names;<br />
- BTF.ext source code lines strings.<br />
<br />
Verifier log buffer should be properly sized for typical verifier state<br />
output. But it&#39;s sort-of expected that this buffer won&#39;t be long enough<br />
in some circumstances. So let&#39;s drop the check. In any case code will<br />
work correctly, at worst truncating a part of a single line output.



