CVE-2025-71106: Linux内核filesystems_freeze_callback逻辑反转漏洞

// PoC for CVE-2025-71106 // This vulnerability is triggered when filesystem_freeze_enabled is false // but the reversed logic causes all filesystems to freeze #include <stdio.h> #include <stdlib.h> #include <string.h> /* * Trigger conditions: * 1. Set filesystem_freeze_enabled = 0 (disabled) * 2. The reversed check in filesystems_freeze_callback() will: * - Execute filesystem freeze operations * - Trigger WARN_ON_ONCE() in __set_task_frozen() * - Potentially cause DoS */ int main() { printf("CVE-2025-71106 PoC\n"); printf("Linux Kernel filesystems_freeze_callback() Logic Reversal\n\n"); printf("Vulnerability Details:\n"); printf("- Function: filesystems_freeze_callback()\n"); printf("- Issue: freeze_all_ptr check logic is reversed\n"); printf("- Trigger: filesystem_freeze_enabled=false triggers freeze\n"); printf("- Impact: System DoS via filesystem freeze\n\n"); printf("This is a LOCAL low-privilege vulnerability.\n"); printf("CVSS 3.1 Vector: CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H\n"); printf("CVSS Score: 5.5 (Medium)\n\n"); printf("Note: Actual exploitation requires kernel-level access.\n"); printf("Refer to kernel commits for fix:\n"); printf("- 222047f68e8565c558728f792f6fef152a1d4d51\n"); printf("- b107196729ff6b9d6cde0a71f49c1243def43328\n"); return 0; }