# DF-3722 VERDICT

**Status: inconclusive** (hardware-gated; Info-grade hardening), **confidence: certain** source-level.

Three loci ship uninitialized kernel stack to the NIC: mxge_close's
uninitialized mxge_cmd_t (:3517/:3526 -> 12 bytes), mxge_dummy_rdma's
24-of-64 initialized buffer (:738/:758-765/:769), mxge_load_firmware's
28-of-64 initialized handoff buffer (:904/:954-967/:970). Disclosure is
device-directed only. Fix is three bzero() calls (fix.diff, git-apply
clean). Not runtime-testable: needs a Myricom NIC to observe the SRAM
image; skipped guest verification per Low/Info convention.

## Fix status (batch validation)
Applied with the 36 sibling fix.diffs of this batch in findings/poc/_batch41/all_fixes.patch; single in-guest `make -j6 nativekernel KERNCONF=X86_64_GENERIC` completed RC=0 with zero errors under -Werror (full log: findings/poc/_batch41/fix_build8.log). Behavior A/B intentionally skipped for this Info-tier item.