CVE-2026-43372 Linux内核Microchip驱动IRQ泄漏漏洞

/* * PoC Concept for CVE-2026-43372 (Logic Simulation) * This code demonstrates the flawed logic in ksz_ptp_irq_setup. * In a real scenario, this requires specific hardware. */ #include <linux/module.h> #include <linux/irq.h> #include <linux/interrupt.h> struct mock_data { int irq_base; int count; }; static irqreturn_t mock_handler(int irq, void *dev_id) { return IRQ_HANDLED; } /* * Simulates the vulnerable function logic */ int vulnerable_setup(struct mock_data *data) { int ret, i; // Simulate creating a new IRQ mapping int new_irq = data->irq_base + data->count; // Simulate request_threaded_irq failing ret = request_threaded_irq(new_irq, NULL, mock_handler, IRQF_SHARED, "mock", data); if (ret) { // VULNERABILITY: The new_irq mapping is not disposed here. // The error path only frees previously set up mappings. printk(KERN_ERR "IRQ setup failed for %d, leaking resource\n", new_irq); return ret; } data->count++; return 0; } /* * Patched logic would involve freeing the mapping here before returning error. */