CVE-2026-43150: Linux内核perf/arm-cmn内存破坏漏洞

/* * Conceptual PoC for CVE-2026-43150 * Triggering the vulnerability requires a system with an ARM CMN * hardware configuration that is 'unknown' to the driver * and has dimensions larger than the driver's hardcoded limits. * * This is typically triggered automatically on boot or module load. */ #include <linux/module.h> #include <linux/kernel.h> int init_module(void) { printk(KERN_INFO "PoC: Loading module to trigger arm-cmn probe on large/unknown hardware\n"); // The vulnerability occurs when the arm-cmn driver probes the device. // If the hardware revision ID is unknown (e.g., newer silicon) // and the mesh size (e.g., 6x6) exceeds the assumed max (e.g., 4x4), // the driver writes past the end of the allocated node array. return 0; } void cleanup_module(void) { printk(KERN_INFO "PoC: Unloading module\n"); } MODULE_LICENSE("GPL");