⬢ DragonFlyBSD Kernel Audit
DF-3601 / manifest.json
← back to finding ↓ download raw 
 1
 2
 3
 4
 5
 6
 7
 8
 9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
{
  "finding_id": "DF-3601",
  "title": "hdaa_sysctl_reconfig: device-tree mutation inside sysctl handler self-deadlocks the global sysctllock (permanent kernel freeze)",
  "verdict": "reproduced",
  "impact": "dos",
  "confidence": "certain",
  "reproduce": {
    "build": "boot guest with -device intel-hda -device hda-duplex; kldload snd_hda",
    "run": "sysctl dev.hdaa.0.reconfig=1   (as root)",
    "expected": "vulnerable: write never returns, system progressively wedges (sysctl/ps/login/new ssh hang), no panic, qemu alive. patched (fix.diff): returns rc=0, pcm0 detaches and re-attaches, system healthy."
  },
  "kernel_refs": [
    "sys/dev/sound/pci/hda/hdaa.c:6474",
    "sys/dev/sound/pci/hda/hdaa.c:6492",
    "sys/kern/kern_sysctl.c:1572",
    "sys/kern/kern_sysctl.c:1642",
    "sys/dev/sound/pcm/sound.c:1233"
  ],
  "artifacts": [
    "README.md", "VERDICT.md", "run.log", "fix_validation.log", "env.txt",
    "boot.log.firstwedge", "boot.log.repro2", "trigger_reconfig.sh",
    "fix.diff", "verdict.json", "manifest.json"
  ]
}