DF-3900 / manifest.json
{ "finding_id": "DF-3900", "title": "i915 MMIO register mapping (pmap_mapdev KVA + iomap node + shim bus resource) leaked on every driver detach: the only pci_iounmap in the i915 tree is #if 0'd", "verdict": "inconclusive", "impact": "dos (root-gated KVA/resource exhaustion)", "reproduce": { "build": "none (shell trigger)", "run": "sh mmio_leak_cycle.sh 8 [root, Intel-GPU hardware]", "expected": "8 permanent iomap leaks (2MB KVA each on gen5+); guest cannot run (virtio VGA)" }, "kernel_refs": ["sys/dev/drm/i915/i915_drv.c:1027", "sys/dev/drm/i915/i915_drv.c:1048", "sys/dev/drm/linux_iomapping.c:44"], "artifacts": ["README.md", "VERDICT.md", "mmio_leak_cycle.sh", "build.sh", "run.sh", "build.log", "run.log", "env.txt", "fix.diff", "manifest.json", "verdict.json"] } |