⬢ DragonFlyBSD Kernel Audit
DF-4463 / verdict.json
← back to finding ↓ download raw
{
 "finding_id": "DF-4463",
 "poc_id": "DF-4463",
 "status": "untested",
 "reproduced": 0,
 "impact": "Latent UAF/double-free if a cpu device is ever hot-destroyed (none today - pc64 cpu driver has no detach)",
 "confidence": "speculative",
 "attempts": 0,
 "guest_uname": null,
 "code_hash": null,
 "exploit_chain": [],
 "evidence": "Cross-context oid removal without sysctl_ctx_entry_del. ctx-entry-del-before-remove fix.",
 "kernel_refs": [
  "sys/dev/powermng/amdtemp/amdtemp.c:777",
  "sys/dev/powermng/amdtemp/amdtemp.c:674"
 ],
 "verdict": "not_run: latent-only, unreachable on current kernels",
 "fix_status": "not_testable",
 "fix_baseline_reproduced": 0,
 "fix_patched_reproduced": 0,
 "fix_verdict": "not_testable: hardware-gated / Info",
 "fix_evidence": "fix in finding markdown"
}