{
  "finding_id": "DF-4356",
  "title": "postclose teardown order: amdgpu_vm_fini before amdgpu_ctx_mgr_fini (DF-port divergence)",
  "verdict": "inconclusive",
  "impact": "none (demonstrated) / dos (source-level ceiling: GPU page-table UAF at close-race)",
  "reproduce": {
    "build": "cc -O2 -o trigger trigger.c",
    "run": "./trigger /dev/dri/renderD128",
    "expected": "on AMD host: dmesg amdgpu VM fault / ring timeout / gpu recover within iterations (vulnerable) vs clean 4096 cycles (patched)"
  },
  "kernel_refs": ["sys/dev/drm/amd/amdgpu/amdgpu_kms.c:1073", "sys/dev/drm/amd/amdgpu/amdgpu_vm.c:3348", "sys/dev/drm/amd/amdgpu/amdgpu_ctx.c:569", "sys/dev/drm/amd/amdgpu/amdgpu_job.c:193"],
  "artifacts": ["trigger.c", "README.md", "VERDICT.md", "build.sh", "run.sh", "run.log", "env.txt", "fix.diff", "fix_apply_check.log", "fix_build.log", "verdict.json", "manifest.json"]
}