{
 "finding_id": "DF-4491",
 "poc_id": "DF-4491",
 "status": "untested",
 "reproduced": 0,
 "impact": "One-shot boot/probe-time heap leak (up to EDID size) per driver load; no unpriv trigger, no disclosure, no UAF",
 "confidence": "certain",
 "attempts": 0,
 "guest_uname": null,
 "code_hash": null,
 "exploit_chain": [],
 "evidence": "failed: unwind kfrees lvds_connector without freeing base.edid (only intel_lvds_destroy releases it). Requires LVDS panel with modes-but-no-preferred-bit EDID and no VBT LFP mode. Info; PoC skipped per contract.",
 "kernel_refs": [
  "sys/dev/drm/i915/intel_lvds.c:1001",
  "sys/dev/drm/i915/intel_lvds.c:1012",
  "sys/dev/drm/i915/intel_lvds.c:1069"
 ],
 "verdict": "not_run: Info hygiene finding, hardware-gated",
 "fix_status": "not_testable",
 "fix_baseline_reproduced": 0,
 "fix_patched_reproduced": 0,
 "fix_verdict": "not_testable",
 "fix_evidence": "kfree edid on failed unwind in finding markdown"
}