# DF-4459 — drm_gem_init: unchecked `mm` kzalloc (NULL-deref panic under OOM), partial-failure leaks, and dangling dev->mm_private

## Verify (static, against the audit tree)

```
sh run.sh sys/dev/drm/drm_gem.c    # prints the asymmetry + dangling assignment
```

## Build (fix compile-validation)

`sh build.sh` (inside guest, fixed drm_gem.c staged) — drm.ko rebuilds
`-Werror` clean, RC=0 (build.log).

## Files

* `VERDICT.md` — root cause with line cites, trigger analysis
* `run.sh` + `run.log` — static verification of the defect in-tree
* `build.sh` + `build.log` — patched module build
* `fix.diff` — NULL-check both allocations; assign dev->mm_private only
  after drm_ht_create succeeds; free both on failure