DF-4281 / verdict.json
{ "finding_id": "DF-4281", "status": "untested", "attempts": 0, "reproduced": 0, "confidence": "certain", "impact": "Kernel memory / MTRR-slot exhaustion (DoS ceiling) by root on DRM machines.", "verdict": "source-verified; no DRM device nodes on audit guest", "exploit_chain": [], "evidence": "source-only; full path:line trace in pass-2 result block", "kernel_refs": [ "sys/dev/drm/drm_bufs.c:338", "sys/dev/drm/drm_bufs.c:356" ], "guest_uname": "", "code_hash": "", "artifact_dir": "findings/poc/DF-4281/", "fix_status": "not_testable", "fix_baseline_reproduced": 0, "fix_patched_reproduced": 0, "fix_verdict": "mirror the rmmap type-specific teardown (vfree SHM handle, arch_phys_wc_del, drm_pci_free) on both error paths", "fix_evidence": "source-only" } |