CVE-2026-31763 Linux内核mpu3050驱动DoS漏洞

/* * PoC Concept: Triggering the free_irq mismatch in mpu3050 driver * This requires the hardware to be present and the driver loaded. */ #include <linux/module.h> #include <linux/i2c.h> // Hypothetical structure based on the vulnerability description struct mpu3050 { struct iio_trigger *trig; // ... other fields }; // Simulating the vulnerable remove function static int vulnerable_remove(struct i2c_client *client) { struct mpu3050 *mpu3050 = i2c_get_clientdata(client); // The vulnerability: free_irq is called with 'mpu3050' (device struct) // instead of 'mpu3050->trig' (the dev_id used during request_irq). // This mismatch causes the kernel to crash when attempting to free the IRQ. free_irq(client->irq, mpu3050); return 0; }