Description (CNA)
In the Linux kernel, the following vulnerability has been resolved: bpf: drop unnecessary user-triggerable WARN_ONCE in verifierl log It's trivial for user to trigger "verifier log line truncated" warning, as verifier has a fixed-sized buffer of 1024 bytes (as of now), and there are at least two pieces of user-provided information that can be output through this buffer, and both can be arbitrarily sized by user: - BTF names; - BTF.ext source code lines strings. Verifier log buffer should be properly sized for typical verifier state output. But it's sort-of expected that this buffer won't be long enough in some circumstances. So let's drop the check. In any case code will work correctly, at worst truncating a part of a single line output.
Affected (CNA)
| Vendor / product | Versions |
|---|---|
| Linux / Linux | affected a2a7d5701052542cd2260e7659b12443e0a74733 before 40c88c429a598006f91ad7a2b89856cd50b3a008; affected a2a7d5701052542cd2260e7659b12443e0a74733 before 926a175026fed5d534f587ea4ec3ec49265cd3c5; affected a2a7d5701052542cd2260e7659b12443e0a74733 before cff36398bd4c7d322d424433db437f3c3391c491 |
| Linux / Linux | affected 4.15; unaffected 0 before 4.15; unaffected 6.1.107 through 6.1.*; unaffected 6.4.7 through 6.4.*; unaffected 6.5 through * |
CWE
No CWE identifiers supplied.