DF-3938 / manifest.json
{ "verdict": "inconclusive", "impact": "none", "confidence": "certain", "reproduce": { "build": "n/a (dead code in this port + requires ENA hardware)", "run": "hypothetical future caller passing non-NULL key + malicious device keys_num > 10 -> OOB read (48B DMA alloc) + OOB write (caller buffer)", "expected": "kernel memory corruption if ever wired to a fixed-size key buffer" }, "kernel_refs": [ "sys/dev/virtual/amazon/ena/ena-com/ena_com.c:2354", "sys/dev/virtual/amazon/ena/ena-com/ena_com.c:2327", "sys/dev/virtual/amazon/ena/ena-com/ena_admin_defs.h:593" ], "artifacts": [ "README.md", "VERDICT.md", "fix.diff", "env.txt", "manifest.json", "verdict.json" ] } |