DF-4393 / verdict.json
{ "finding_id": "DF-4393", "status": "untested", "attempts": 0, "reproduced": 0, "confidence": "certain", "impact": "The OCR path busy-waits 20 seconds then spins indefinitely on the RSR bit with no timeout; invoked from the reset holding mfi_io_lock in callout context - a firmware that never clears the bit parks the softclock thread forever with the lock held, permanently stalling all callouts system-wide", "verdict": "source-verified; hardware-gated", "exploit_chain": [], "evidence": "source-only; path:line citations in pass-2 result block", "kernel_refs": [ "sys/dev/raid/mfi/mfi_tbolt.c:1275" ], "guest_uname": "", "code_hash": "", "artifact_dir": "findings/poc/DF-4393/", "fix_status": "not_testable", "fix_baseline_reproduced": 0, "fix_patched_reproduced": 0, "fix_verdict": "see pass-2 result block fix", "fix_evidence": "source-only" } |