{
  "finding_id": "DF-4358",
  "status": "untested",
  "reproduced": 0,
  "impact": "none",
  "confidence": "certain",
  "verdict": "Info-severity hardening finding; PoC intentionally not run per audit contract (skip Low/Info hardening). amdgpu_kms.c:185-186 contains a DragonFly-port-added kprintf that prints kernel virtual addresses of the drm_device and amdgpu_device heap objects to the console/dmesg on every amdgpu attach; upstream v5.0/v5.2/v5.4 verified not to have it. On KASLR-less DragonFly the disclosure has near-zero exploit value today; it is gratuitous %p noise that would defeat future randomization hardening. Fix: delete the two lines.",
  "exploit_chain": "",
  "evidence": "README.md (source quote + upstream comparison); VERDICT.md",
  "kernel_refs": [
    "sys/dev/drm/amd/amdgpu/amdgpu_kms.c:185",
    "sys/dev/drm/amd/amdgpu/amdgpu_kms.c:186"
  ],
  "poc_changes": "n/a",
  "attempts": 0,
  "guest_uname": "DragonFly dfbsd 6.5-DEVELOPMENT DragonFly 6.5-DEVELOPMENT #0: Thu Jul  2 06:02:54 UTC 2026 root@dfbsd:/usr/obj/usr/src/sys/X86_64_GENERIC x86_64",
  "runtime_sec": 0,
  "guest_dirty": 1,
  "build_cmd": "n/a (print at driver attach; observable via dmesg on any AMD-equipped host)",
  "run_cmd": "dmesg | grep amdgpu_driver_load_kms",
  "code_hash": "",
  "notes": "Status untested is deliberate: Info hardening finding, PoC skipped per contract. Same class as DF-2008 (rated Info).",
  "recommended_fix": "Delete the DF-added kprintf of drm_device/adev pointers in amdgpu_driver_load_kms (amdgpu_kms.c:185-186).",
  "fix_status": "not_testable",
  "fix_kernel_uname": "DragonFly dfbsd 6.5-DEVELOPMENT #0: Thu Jul  2 06:02:54 UTC 2026 (buildkernel compile-validation only)",
  "fix_baseline_reproduced": 0,
  "fix_patched_reproduced": 0,
  "fix_verdict": "fix.diff deletes the two kprintf lines (restores upstream state). patch --dry-run apply-check OK on guest pristine /usr/src; amdgpu module rebuilt cleanly with the deletion (make -j6 -> amdgpu.ko, zero warnings, mod_done_0, fix_build.log). Behavioral print-absence check requires an AMD GPU attach, unavailable here.",
  "fix_evidence": "fix_apply_check.log (DF-4358_APPLY_CHECK_OK); fix_build.log (FULL module build: amdgpu_kms.o zero warnings, amdgpu.ko linked, mod_done_0)"
}