CVE-2026-23426: Linux内核drm/logicvc引用泄漏漏洞

/* * PoC Concept: Triggering the reference leak in logicvc_drm_config_parse * This code simulates the vulnerable scenario where a device node is fetched * but not released. */ #include <linux/of.h> #include <linux/module.h> static int __init poc_init(void) { struct device_node *node, *layers; // Find a compatible device (simulated) node = of_find_compatible_node(NULL, NULL, "xylon,logicvc-3.10.a"); if (!node) return -ENODEV; // Vulnerable operation: Acquire reference but forget to release layers = of_get_child_by_name(node, "layers"); // Missing: of_node_put(layers); // Missing: of_node_put(node); if (layers) pr_info("PoC: Layers node found, reference leaked."); return 0; } static void __exit poc_exit(void) { pr_info("PoC: Module unloaded."); } module_init(poc_init); module_exit(poc_exit); MODULE_LICENSE("GPL");