⬢ DragonFlyBSD Kernel Audit
DF-4523 / verdict.json
← back to finding ↓ download raw
{
 "finding_id": "DF-4523",
 "poc_id": "DF-4523",
 "status": "untested",
 "reproduced": 0,
 "impact": "One IB SA-bo + fence leaked from the fixed-size shared pool per unrecovered reset cycle - progressive pool exhaustion = persistent GPU-accel DoS",
 "confidence": "certain",
 "attempts": 0,
 "guest_uname": null,
 "code_hash": null,
 "exploit_chain": [],
 "evidence": "Both fence-wait early exits skip radeon_ib_free while every other exit performs it. Unpriv GPU client wedges SDMA -> reset cycles -> leak per cycle. Free-on-both-exits fix.",
 "kernel_refs": [
  "sys/dev/drm/radeon/cik_sdma.c:738",
  "sys/dev/drm/radeon/cik_sdma.c:746"
 ],
 "verdict": "not_run: no CIK radeon hardware on guest; ib_test runs at init/resume/after every GPU reset",
 "fix_status": "not_testable",
 "fix_baseline_reproduced": 0,
 "fix_patched_reproduced": 0,
 "fix_verdict": "not_testable: no AMD GPU on guest",
 "fix_evidence": "fix in finding markdown"
}