DF-4058 / verdict.json
{ "finding_id": "DF-4058", "status": "untested", "attempts": 0, "reproduced": 0, "confidence": "certain", "impact": "Privileged local user turns a tuning variable into an instant kernel panic of a production host.", "verdict": "source-verified; hardware-gated (no device on audit guest); no guest run per allocation", "exploit_chain": [], "evidence": "source-only; path:line citations in pass-2 result block", "kernel_refs": [ "sys/dev/netif/et/if_et.c:314", "sys/dev/netif/et/if_et.c:1958" ], "guest_uname": "", "code_hash": "", "artifact_dir": "findings/poc/DF-4058/", "fix_status": "not_testable", "fix_baseline_reproduced": 0, "fix_patched_reproduced": 0, "fix_verdict": "convert to a validating sysctl handler (reject v<=0) mirroring et_sysctl_rx_intr_npkts; defensively guard the divide", "fix_evidence": "source-only" } |