# DF-0321 -- Low

## Verdict: REPRODUCED (source-confirmed)

REAL: maxunequalmcs is only assigned when ic_txstream>=2/3/4; with ic_txstream 0/1 and HTC_TXUNEQUAL set, an indeterminate stack value is used at line 1678 to filter MCS 33-76 (UB). Driver-config only.

## Impact ceiling
none

## Cited refs
- sys/netproto/802_11/wlan/ieee80211_ht.c:1643

## Fix
Initialize maxunequalmcs = 0 so the filter is well-defined for all txstream values.

## Validation
Combined 60-finding fix kernel (findings/poc/_low_merged.patch) built `make -j6 nativekernel KERNCONF=X86_64_GENERIC` => rc=0, 0 errors, -Werror. fix_status=fixed.