CVE-2026-43439 Linux内核cgroup竞态条件漏洞

#!/bin/bash # This is a reproduction script based on the vulnerability description. # It requires a kernel with instrumentation (cgroup_test knob) to hit the race reliably. CGROUP_PATH="/sys/fs/cgroup/test_cgroup" # Step 1: Create a test cgroup mkdir -p $CGROUP_PATH # Step 2: Spawn three long-running tasks task1 & task2 & task3 & # Move tasks to the test cgroup echo $! > $CGROUP_PATH/cgroup.procs # Step 3: Inject delay (if cgroup_test interface exists) # echo 1000 > /sys/kernel/cgroup/cgroup_test # Step 4 & 5: Trigger race condition # In one shell, read procs (iteration) # In another shell, migrate a task (migration) # Simulating the race by running in background ( cat $CGROUP_PATH/cgroup.procs ) & ( sleep 0.001 # Artificial delay to widen race window # Migrate task2 to a different cgroup echo <PID_OF_TASK2> > /sys/fs/cgroup/another_cgroup/cgroup.procs ) & wait # Check if tasks were skipped in the first read echo "Check cgroup.procs content manually to verify if tasks were skipped."