⬢ DragonFlyBSD Kernel Audit
DF-4508 / verdict.json
← back to finding ↓ download raw
{
 "finding_id": "DF-4508",
 "poc_id": "DF-4508",
 "status": "untested",
 "reproduced": 0,
 "impact": "Calling thread pinned in-kernel forever on stuck SMBI/SWSM semaphore (surprise removal, wedged fw); interface wedged under serializer",
 "confidence": "certain",
 "attempts": 0,
 "guest_uname": null,
 "code_hash": null,
 "exploit_chain": [],
 "evidence": "Release path retries the hw semaphore with an empty-body unbounded while; acquire side is capped 200x5ms. Same class as DF-4306 (80003es2lan); upstream Linux igb shares it. No igb NIC on guest.",
 "kernel_refs": [
  "sys/dev/netif/ig_hal/e1000_i210.c:146",
  "sys/dev/netif/ig_hal/e1000_i210.c:147"
 ],
 "verdict": "not_run: hardware-gated (no I210/I211 on guest); code-certain",
 "fix_status": "not_testable",
 "fix_baseline_reproduced": 0,
 "fix_patched_reproduced": 0,
 "fix_verdict": "not_testable",
 "fix_evidence": "bound-the-release-retry diff in finding markdown"
}