CVE-2026-43356 Linux内核adis组件空指针解引用漏洞

#include <stdio.h> #include <stdlib.h> // Conceptual PoC demonstrating the vulnerability logic struct adis_ops { int (*write)(void); int (*read)(void); }; struct adis { struct adis_ops *ops; }; // Simulating the vulnerable function in the kernel void vulnerable_adis_init(struct adis *adis) { // Vulnerability: Dereferencing adis->ops without checking if it is NULL if (adis->ops->write == NULL || adis->ops->read == NULL) { printf("Assigning default ops...\n"); } } int main() { // Simulating zero-initialized allocation (devm_iio_device_alloc) struct adis *my_adis = (struct adis *)calloc(1, sizeof(struct adis)); // ops is NULL here (0x0) printf("Triggering NULL pointer dereference...\n"); // This will crash (Segfault) mimicking the Kernel Panic/Oops vulnerable_adis_init(my_adis); free(my_adis); return 0; }