⬢ DragonFlyBSD Kernel Audit
DF-4102 / verdict.json
← back to finding ↓ download raw
{
 "finding_id": "DF-4102",
 "status": "untested",
 "attempts": 0,
 "reproduced": 0,
 "confidence": "certain",
 "impact": "Local DoS by any DRM-master-holding user on radeon hardware: one ioctl per leaked pin; VRAM exhaustion degrades/deadlocks the display subsystem.",
 "verdict": "source-verified; hardware-gated (no BusLogic HBA / no radeon GPU on audit guest)",
 "exploit_chain": [],
 "evidence": "source-only; full path:line trace in pass-2 result block",
 "kernel_refs": [
  "sys/dev/drm/radeon/atombios_crtc.c:1183",
  "sys/dev/drm/radeon/atombios_crtc.c:1260",
  "sys/dev/drm/radeon/atombios_crtc.c:1557"
 ],
 "guest_uname": "",
 "code_hash": "",
 "artifact_dir": "findings/poc/DF-4102/",
 "fix_status": "not_testable",
 "fix_baseline_reproduced": 0,
 "fix_patched_reproduced": 0,
 "fix_verdict": "unpin under reserve on every error return after the pin (or validate format/tiling before radeon_bo_pin)",
 "fix_evidence": "source-only"
}