CVE-2026-43369 Linux内核空指针解引用漏洞

/* * Conceptual PoC for CVE-2026-43369 * This C code simulates the vulnerable logic in the Linux Kernel. */ struct ip_block { void *version; // Can be NULL if init fails }; struct amdgpu_device { struct ip_block *ip_blocks; int num_ip_blocks; }; void vulnerable_cleanup(struct amdgpu_device *adev) { for (int i = 0; i < adev->num_ip_blocks; i++) { // VULNERABILITY: Direct access without NULL check printf("Checking version: %p\n", adev->ip_blocks[i].version); // If version is NULL, accessing its members causes a crash/OOPS // int status = adev->ip_blocks[i].version->status; } } /* * Trigger: * 1. Attacker causes GPU init failure (e.g., specific hardware interaction). * 2. Kernel calls cleanup path. * 3. vulnerable_cleanup is executed with a NULL version pointer. * 4. Kernel Panic occurs. */