# DF-0331 -- Low

## Verdict: REPRODUCED (source-confirmed)

REAL: ng_ppp_mp_recv kprintf's 'No free fragments headers' on every dropped fragment when the 128-slot store is full, with no rate limit; a remote PPP peer (pre-auth) can flood fragments -> line-rate console/syslog flood. MP enabled + link up required.

## Impact ceiling
dos

## Cited refs
- sys/netgraph7/ppp/ng_ppp.c:1520

## Fix
Rate-limit the diagnostic (1 per 100 drops).

## Validation
Combined 60-finding fix kernel (findings/poc/_low_merged.patch) built `make -j6 nativekernel KERNCONF=X86_64_GENERIC` => rc=0, 0 errors, -Werror. fix_status=fixed.