# DF-0317 -- Low

## Verdict: REPRODUCED (source-confirmed)

REAL: wg_is_underload uses a STATIC last_underload shared across all wg interfaces and CPUs; flooding interface A forces interface B to demand cookies (cross-interface DoS coupling), and the RMW on the multi-word timespec is non-atomic (author: Dont care about races).

## Impact ceiling
none

## Cited refs
- sys/net/wg/if_wg.c:1577

## Fix
Documented the cross-interface coupling; full fix moves the timestamp into struct wg_softc (header change). Comment-only (compiles).

## Validation
Combined 60-finding fix kernel (findings/poc/_low_merged.patch) built `make -j6 nativekernel KERNCONF=X86_64_GENERIC` => rc=0, 0 errors, -Werror. fix_status=not_testable.