⬢ DragonFlyBSD Kernel Audit
DF-4357 / manifest.json
← back to finding ↓ download raw 
 1
 2
 3
 4
 5
 6
 7
 8
 9
10
11
12
13
{
  "finding_id": "DF-4357",
  "title": "AMDGPU_INFO_READ_MMR_REG missing upstream count>128 cap (unbounded kernel allocation)",
  "verdict": "inconclusive",
  "impact": "none (demonstrated) / dos (Low ceiling: kernel memory pressure)",
  "reproduce": {
    "build": "cc -O2 -o trigger trigger.c",
    "run": "./trigger /dev/dri/renderD128",
    "expected": "vulnerable: ENOMEM iterations after 512MiB kmalloc attempts; patched: EINVAL instantly"
  },
  "kernel_refs": ["sys/dev/drm/amd/amdgpu/amdgpu_kms.c:668"],
  "artifacts": ["trigger.c", "README.md", "VERDICT.md", "build.sh", "run.sh", "run.log", "env.txt", "fix.diff", "fix_apply_check.log", "fix_build.log", "verdict.json", "manifest.json"]
}