CVE-2026-43328 Linux内核cpufreq双重释放漏洞

/* * Conceptual PoC illustrating the Double Free logic in cpufreq_dbs_governor_init * This is a simplified representation of the vulnerable code path. */ #include <linux/kobject.h> #include <linux/slab.h> // Mock structures for illustration struct dbs_data { struct kobject kobj; // ... other fields ... }; void vulnerable_function(struct dbs_data *dbs_data) { int ret; // Attempt to initialize and add kobject ret = kobject_init_and_add(&dbs_data->kobj, &ktype, NULL, "governor"); if (ret) { // ERROR HANDLING PATH // 1. kobject_put triggers the release callback -> calls kfree(dbs_data) kobject_put(&dbs_data->kobj); // 2. The code then calls kfree again -> DOUBLE FREE kfree(dbs_data); return ret; } return 0; }