⬢ DragonFlyBSD Kernel Audit
DF-3791 / manifest.json
← back to finding ↓ download raw 
 1
 2
 3
 4
 5
 6
 7
 8
 9
10
11
12
13
14
15
16
17
18
19
20
{
  "verdict": "inconclusive",
  "impact": "dos (source-level, Low); runtime unverifiable on this guest",
  "finding_id": "DF-3791",
  "title": "drm_atomic_helper: missing duplicated-flag backport (upstream 022debad063e) breaks resume after connector hot-unplug",
  "reproduce": {
    "build": "n/a — no PoC source; trigger requires real GPU (amdgpu/i915) + hot-pluggable display",
    "run": "n/a — guest has no DRM device (QEMU std VGA, no driver in tree, /dev/dri absent); see env.txt",
    "expected": "On vulnerable kernel: suspend -> unplug DP/MST connector -> resume -> '[CONNECTOR:n] is not registered' -> drm_atomic_helper_resume() returns -EINVAL, all outputs stay off. With fix.diff applied: resume restores remaining outputs."
  },
  "kernel_refs": [
    "sys/dev/drm/drm_atomic_helper.c:325",
    "sys/dev/drm/drm_atomic_helper.c:3230",
    "sys/dev/drm/drm_atomic_helper.c:3840",
    "sys/dev/drm/amd/display/amdgpu_dm/amdgpu_dm.c:710",
    "sys/dev/drm/amd/display/amdgpu_dm/amdgpu_dm.c:908",
    "sys/dev/drm/i915/intel_display.c:6381"
  ],
  "artifacts": ["README.md", "VERDICT.md", "fix.diff", "verdict.json", "manifest.json", "env.txt"]
}