DF-4463 / verdict.json
{ "finding_id": "DF-4463", "poc_id": "DF-4463", "status": "untested", "reproduced": 0, "impact": "Latent UAF/double-free if a cpu device is ever hot-destroyed (none today - pc64 cpu driver has no detach)", "confidence": "speculative", "attempts": 0, "guest_uname": null, "code_hash": null, "exploit_chain": [], "evidence": "Cross-context oid removal without sysctl_ctx_entry_del. ctx-entry-del-before-remove fix.", "kernel_refs": [ "sys/dev/powermng/amdtemp/amdtemp.c:777", "sys/dev/powermng/amdtemp/amdtemp.c:674" ], "verdict": "not_run: latent-only, unreachable on current kernels", "fix_status": "not_testable", "fix_baseline_reproduced": 0, "fix_patched_reproduced": 0, "fix_verdict": "not_testable: hardware-gated / Info", "fix_evidence": "fix in finding markdown" } |