# DF-0330 -- Low

## Verdict: REPRODUCED (source-confirmed)

REAL: compareLatencies is a file-scope global set to a stack-local array and nulled after sort; two concurrent bundles where A finishes (NULLs it) while B is inside kqsort -> NULL[index] panic. Currently NOT reachable: netgraph7 funnels all items to cpu0. Latent if cpu0 funneling changes.

## Impact ceiling
none

## Cited refs
- sys/netgraph7/ppp/ng_ppp.c:2291

## Fix
Add a KKASSERT(compareLatencies != NULL) guard before the sort. Partial (compiles); not reachable today.

## Validation
Combined 60-finding fix kernel (findings/poc/_low_merged.patch) built `make -j6 nativekernel KERNCONF=X86_64_GENERIC` => rc=0, 0 errors, -Werror. fix_status=not_testable.