CVE-2026-43031 Linux内核Xilinx AxiNet BQL记账漏洞

/* * PoC Concept for CVE-2026-43031 * This vulnerability is a logic bug in the Linux kernel driver. * It requires specific hardware (Xilinx Axi Ethernet) to trigger. * * Triggering condition: * 1. Generate network traffic that requires multiple Buffer Descriptors (BDs). * 2. Ensure the completion of these BDs spans across different NAPI poll cycles. * 3. This causes the BQL (Byte Queue Limits) accounting to underflow/stall. * * The following is a pseudo-code representation of the traffic generation logic. */ void generate_trigger_traffic() { // Configure interface for Jumbo Frames or Scatter-Gather I/O // Send packets larger than the standard BD size // Rate limit to interact with NAPI polling timing while (1) { send_large_packet(target_ip, packet_size > BD_MAX_SIZE); // Introduce slight delay to allow NAPI interaction usleep(100); } // Result: The TX queue on the target device will eventually stop sending packets. }