DF-4102 / verdict.json
{ "finding_id": "DF-4102", "status": "untested", "attempts": 0, "reproduced": 0, "confidence": "certain", "impact": "Local DoS by any DRM-master-holding user on radeon hardware: one ioctl per leaked pin; VRAM exhaustion degrades/deadlocks the display subsystem.", "verdict": "source-verified; hardware-gated (no BusLogic HBA / no radeon GPU on audit guest)", "exploit_chain": [], "evidence": "source-only; full path:line trace in pass-2 result block", "kernel_refs": [ "sys/dev/drm/radeon/atombios_crtc.c:1183", "sys/dev/drm/radeon/atombios_crtc.c:1260", "sys/dev/drm/radeon/atombios_crtc.c:1557" ], "guest_uname": "", "code_hash": "", "artifact_dir": "findings/poc/DF-4102/", "fix_status": "not_testable", "fix_baseline_reproduced": 0, "fix_patched_reproduced": 0, "fix_verdict": "unpin under reserve on every error return after the pin (or validate format/tiling before radeon_bo_pin)", "fix_evidence": "source-only" } |