CVE-2026-43499 PoC Scanner

This repository contains a Go-based scanner and proof-of-concept implementation for a Linux kernel vulnerability related to CVE-2026-43499. The project is intended for research, defensive analysis, and authorized security testing only.

Overview

The code in this repository performs two main functions:

• A lightweight scanner that inspects the current kernel release and basic kernel configuration indicators.
• A proof-of-concept trigger that demonstrates the suspected vulnerability behavior through Linux futex and rtmutex interactions.

Important Warning

The exploit path may cause a kernel panic or system crash. It should only be executed on isolated test systems or environments where impact is understood and acceptable.

Requirements

• Go 1.20 or newer
• Linux-based system
• Root or sudo privileges for the exploit mode

Build

From the repository root, run:

go build -o cve_2026_43499 CVE-2026-43499_poc_scan.go

Usage

Scan mode

Run a safe detection check:

./cve_2026_43499 --scan

Exploit mode

Trigger the proof-of-concept flow:

sudo ./cve_2026_43499 --exploit

Project Structure

.
├── CVE-2026-43499_poc_scan.go
├── images/
└── README.md

Notes

• This repository is not intended for unauthorized exploitation.
• Use the scanner mode for passive assessment and the exploit mode only in controlled lab environments.
• Always follow your organization’s security policy and applicable laws before running kernel-level PoC code.

Disclaimer

This project is provided for educational and defensive purposes. The author is not responsible for any misuse, damage, or unauthorized activity resulting from the use of this code.