CVE-2026-43471: Linux内核UFS空指针解引用漏洞

/* * Conceptual Proof of Concept for CVE-2026-43471 * This snippet demonstrates the missing NULL check. */ #include <linux/kernel.h> // Mock structures for illustration struct ufs_hw_queue { int id; }; struct ufs_hw_queue *ufshcd_mcq_req_to_hwq(struct request *req) { // In certain error states, this might return NULL return NULL; } void vulnerable_function(struct request *req) { struct ufs_hw_queue *hwq; hwq = ufshcd_mcq_req_to_hwq(req); // VULNERABILITY: Missing NULL check on hwq before accessing hwq->id // This will cause a kernel panic (NULL pointer dereference) printk(KERN_INFO "Hardware Queue ID: %d\n", hwq->id); } // Fix: // if (!hwq) // return;