⬢ DragonFlyBSD Kernel Audit
DF-3904 / manifest.json
← back to finding ↓ download raw 
 1
 2
 3
 4
 5
 6
 7
 8
 9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
{
  "finding_id": "DF-3904",
  "title": "sk_rxeof() Rx walk has no work bound (DF-3761 family, sk(4) instance)",
  "file": "sys/dev/netif/sk/if_sk.c",
  "impact": "remote RX livelock/DoS on sk hardware (both ports of dual-port cards share the wedged serializer)",
  "verdict": "inconclusive (source-certain, hardware-gated)",
  "reproduce": {
    "build": "n/a - no sk NIC on the audit guest",
    "run": "n/a - requires SysKonnect SK-98xx/Yukon hardware + line-rate RX flood",
    "expected": "on real hardware: interrupt CPU pinned at 100% in sk_intr/sk_rxeof, serializer held indefinitely, softclock/netisr starvation"
  },
  "kernel_refs": [
    "sys/dev/netif/sk/if_sk.c:1820",
    "sys/dev/netif/sk/if_sk.c:1833",
    "sys/dev/netif/sk/if_sk.c:2212",
    "sys/dev/netif/sk/if_sk.c:1514",
    "sys/dev/netif/msk/if_msk.c:3225"
  ],
  "artifacts": [
    "README.md",
    "sk_rxeof_walk_shape.c",
    "fix.diff",
    "manifest.json",
    "verdict.json"
  ]
}