{
 "finding_id": "DF-4277",
 "status": "untested",
 "attempts": 0,
 "reproduced": 0,
 "confidence": "certain",
 "impact": "cbb_resume() error path NULLs irq_res/base_res and returns ENOMEM but leaves the driver attached with stale intrhand and a live event thread - subsequent cbb_detach/cbb_suspend dereference the NULL resources (kernel panic in rman/bus paths).",
 "verdict": "source-verified; hardware-gated (no CardBus bridge on audit guest; rare resume-time interrupt re-establishment failure precondition)",
 "exploit_chain": [],
 "evidence": "pccbb.c:1574-1583 partial cleanup vs consumers at :293, :302-304, :1541",
 "kernel_refs": [
  "sys/dev/pccard/pccbb/pccbb.c:1574",
  "sys/dev/pccard/pccbb/pccbb.c:293"
 ],
 "guest_uname": "",
 "code_hash": "",
 "artifact_dir": "findings/poc/DF-4277/",
 "fix_status": "not_testable",
 "fix_baseline_reproduced": 0,
 "fix_patched_reproduced": 0,
 "fix_verdict": "on setup_intr failure, keep resources valid for later detach (do not release+NULL what teardown consumes), or fully detach the device",
 "fix_evidence": "source-only"
}