DragonFly dfbsd 6.5-DEVELOPMENT DragonFly 6.5-DEVELOPMENT #0: Thu Jul 2 06:02:54 UTC 2026 root@dfbsd:/usr/obj/usr/src/sys/X86_64_GENERIC x86_64 Kernel: X86_64_GENERIC (options INVARIANTS on; default) Compiler: gcc 8.3 [DragonFly] Release/2019-02-22 DEFAULT netgraph: sys/netgraph/ ABI version 2 (net.graph.abi_version=2). Has NO deflate node. VULNERABLE code: sys/netgraph7/ (ABI version 12). NOT built into the default kernel. To exercise it on this guest: build & load the netgraph7 stack kldload /usr/obj/usr/src/sys/netgraph7/netgraph/netgraph.ko (abi 12 core) kldload /usr/obj/usr/src/sys/netgraph7/socket/ng_socket.ko kldload /usr/obj/usr/src/sys/netgraph7/deflate/ng_deflate.ko Base ngctl/libnetgraph target the old ABI-2 netgraph and CANNOT speak to netgraph7; df0638.c is a raw netgraph7 socket client (control+data) that drives the decomp hook. Creating an AF_NETGRAPH socket requires root (harness detail; the bug trigger is the crafted PPP PROT_COMPD frame, which in deployment arrives from a network peer).