CVE-2025-71300 Linux内核ZynqMP设备树内存违规漏洞

#!/bin/bash # PoC script to check for CVE-2025-71300 vulnerability signs # This checks if the system might be missing the reserved-memory node due to the manual OP-TEE node. if [ "$(uname -m)" != "aarch64" ]; then echo "[+] System is not ARM64, likely not affected." exit 0 fi echo "[*] Checking Device Tree for OP-TEE configuration..." # Check if the optee node exists in the live device tree if [ -d /sys/firmware/devicetree/base/firmware/optee ]; then echo "[!] OP-TEE node detected." # Check if reserved-memory node for optee is present (simplified check) # In a vulnerable scenario, the mapping might be inconsistent or missing expected regions. if [ ! -d /sys/firmware/devicetree/base/reserved-memory ]; then echo "[!!!] CRITICAL: reserved-memory node missing. System is vulnerable to CVE-2025-71300." echo "[!!!] This can lead to memory access violations during runtime." else echo "[-] reserved-memory node found. System might be patched or manually fixed." fi else echo "[-] OP-TEE node not found." fi