CVE-2026-43004: Linux内核stm32-ospi资源泄漏漏洞

/* * Conceptual PoC for CVE-2026-43004 * Demonstrating the vulnerable logic in the remove callback. */ #include <linux/module.h> #include <linux/platform_device.h> #include <linux/pm_runtime.h> // Hypothetical structure context struct spi_controller *ctrl; int vulnerable_remove(struct platform_device *pdev) { int ret; // Attempt to resume the device ret = pm_runtime_resume_and_get(&pdev->dev); if (ret < 0) { // BUG: Early return on PM failure skips resource cleanup // This leads to leaking 'ctrl' and keeping clocks enabled return ret; } // Normal cleanup path (skipped in the vulnerable case) spi_controller_put(ctrl); pm_runtime_disable(&pdev->dev); return 0; } // To trigger this, one would typically unbind the driver via sysfs // while the device is in a state where PM resume fails. // Command: echo 'stm32-ospi' > /sys/bus/platform/drivers/stm32-ospi/unbind