# DF-0253 -- Low

## Verdict: REPRODUCED (source-confirmed)

REAL: getsynthvnode returns NULL when nc_vp==NULL (line 84) WITHOUT calling nlookup_done(&nd), leaking the held namecache lock+reference. Boot/admin context.

## Impact ceiling
none

## Cited refs
- sys/kern/vfs_synth.c:82
- sys/kern/vfs_synth.c:84

## Fix
Call nlookup_done(&nd) before returning NULL on the nc_vp==NULL path.

## Validation
Combined 60-finding fix kernel (findings/poc/_low_merged.patch) built `make -j6 nativekernel KERNCONF=X86_64_GENERIC` => rc=0, 0 errors, -Werror. fix_status=fixed.