{
 "finding_id": "DF-4514",
 "poc_id": "DF-4514",
 "status": "untested",
 "reproduced": 0,
 "impact": "None in-tree (dead code); latent chosen-length uninitialized kernel-heap disclosure if ever wired to an ioctl (and the diag ioctls themselves lacked priv checks per DF-4320)",
 "confidence": "certain",
 "attempts": 0,
 "guest_uname": null,
 "code_hash": null,
 "exploit_chain": [],
 "evidence": "kmalloc without M_ZERO + copyout executed even after the empty-switch EINVAL. M_ZERO + copyout-only-on-success fix.",
 "kernel_refs": [
  "sys/dev/netif/ath/ath/if_ath_lna_div.c:193",
  "sys/dev/netif/ath/ath/if_ath_lna_div.c:199",
  "sys/dev/netif/ath/ath/if_ath_lna_div.c:205"
 ],
 "verdict": "not_run: zero callers tree-wide; Info hardening",
 "fix_status": "not_testable",
 "fix_baseline_reproduced": 0,
 "fix_patched_reproduced": 0,
 "fix_verdict": "not_testable: Hyper-V/ath hardware absent from guest",
 "fix_evidence": "fix in finding markdown"
}