⬢ DragonFlyBSD Kernel Audit
DF-4427 / verdict.json
← back to finding ↓ download raw 
 1
 2
 3
 4
 5
 6
 7
 8
 9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
{
 "finding_id": "DF-4427",
 "poc_id": "DF-4427",
 "status": "untested",
 "reproduced": 0,
 "impact": "Lost/duplicated WLAN/BT/WWAN on-air notifications; benign int races, no memory-safety consequence",
 "confidence": "certain",
 "attempts": 0,
 "guest_uname": null,
 "code_hash": null,
 "exploit_chain": [],
 "evidence": "Info-level lock-protocol omission; source trace in finding (notify dispatched after acpi_wmi release, evaluate_auto_on_off mutates was_*_on_air unsynchronized vs sysctl handlers under ACPI_SERIAL(hp)). No PoC beyond kernel-instrumented race demo - skipped per Info.",
 "kernel_refs": [
  "sys/dev/acpica/acpi_hp/acpi_hp.c:809",
  "sys/dev/acpica/acpi_hp/acpi_hp.c:818",
  "sys/dev/acpica/acpi_hp/acpi_hp.c:822",
  "sys/dev/acpica/acpi_hp/acpi_hp.c:344",
  "sys/dev/acpica/acpi_hp/acpi_hp.c:400",
  "sys/dev/acpica/acpi_hp/acpi_hp.c:623"
 ],
 "verdict": "not_run: Info hardening finding, serialization-only",
 "fix_status": "not_testable",
 "fix_baseline_reproduced": 0,
 "fix_patched_reproduced": 0,
 "fix_verdict": "not_testable",
 "fix_evidence": "three-line ACPI_SERIAL(hp) bracket around evaluate_auto_on_off call in acpi_hp_notify (in finding markdown)"
}