DragonFlyBSD Kernel Audit
DF-0638 / env.txt
← back to finding ↓ download raw
DragonFly dfbsd 6.5-DEVELOPMENT DragonFly 6.5-DEVELOPMENT #0: Thu Jul  2 06:02:54 UTC 2026
    root@dfbsd:/usr/obj/usr/src/sys/X86_64_GENERIC  x86_64
Kernel: X86_64_GENERIC (options INVARIANTS on; default)
Compiler: gcc 8.3 [DragonFly] Release/2019-02-22
DEFAULT netgraph: sys/netgraph/ ABI version 2 (net.graph.abi_version=2). Has NO deflate node.
VULNERABLE code: sys/netgraph7/ (ABI version 12). NOT built into the default kernel.
  To exercise it on this guest: build & load the netgraph7 stack
    kldload /usr/obj/usr/src/sys/netgraph7/netgraph/netgraph.ko   (abi 12 core)
    kldload /usr/obj/usr/src/sys/netgraph7/socket/ng_socket.ko
    kldload /usr/obj/usr/src/sys/netgraph7/deflate/ng_deflate.ko
  Base ngctl/libnetgraph target the old ABI-2 netgraph and CANNOT speak to netgraph7;
  df0638.c is a raw netgraph7 socket client (control+data) that drives the decomp hook.
Creating an AF_NETGRAPH socket requires root (harness detail; the bug trigger is the
crafted PPP PROT_COMPD frame, which in deployment arrives from a network peer).