Add kernelCTF CVE-2026-43074_lts

[2045castor]

No description provided.

[artmetla]

Please check the comments and improve kernelXDK usage.

[r33s3n6]

Hi @artmetla, thanks for the review. We've addressed the requested XDK changes in e44145e.

Also noticed CI failing during environment setup before reaching the exploit changes. The failure appears to happen while preparing rootfs_v3.img (virt-copy-out exits with code 8), so this may be infrastructure-related rather than caused by this change.

[artmetla]

Hey @r33s3n6. Thanks for ping, fixed the vuln-verify. Please check my comment on how symbols should be added for specific targets.

[r33s3n6]

Hey @r33s3n6. Thanks for ping, fixed the vuln-verify. Please check my comment on how symbols should be added for specific targets.

Thanks @artmetla, that clears it up. We had been reading https://xdk.dev/about/kxdb_database.html#configuration-file and initially thought extending config.py to avoid hardcoding offsets in the exploit was the intended approach. We understand the workflow now and updated the implementation accordingly.

[matrizzo]

Hi, thanks for addressing the comments. I saw that now there are some lines which are commented out. Can you remove them?

[r33s3n6]

Hi, thanks for addressing the comments. I saw that now there are some lines which are commented out. Can you remove them?

Hi @matrizzo, thanks for pointing this out.

The only commented-out line we found was // #include <linux/keyctl.h> in module_context.h, which we have now removed. We also reviewed all the other comments, and they appear to be explanatory comments rather than leftover old code. For clarity, we made some minor adjustments to them as well.

If these are not the lines you were referring to, please point them out and we will update them accordingly.

[matrizzo]

The commented out header is the one I saw. Thank you!