{
  "finding_id": "DF-4608",
  "title": "radeon_vce: NULL-deref panic in radeon_vce_cs_reloc when CS submitted without a relocation chunk",
  "verdict": "untested",
  "impact": "dos",
  "reproduce": {
    "build": "cc -O2 -Wall -o vce_null_relocs vce_null_relocs.c",
    "run": "./vce_null_relocs /dev/dri/renderD128",
    "expected": "On SI/CIK radeon hardware with radeonkms+VCE: immediate kernel panic (page fault at NULL+4). On this audit guest: exits 2, no radeon GPU present."
  },
  "kernel_refs": [
    "sys/dev/drm/radeon/radeon_vce.c:482",
    "sys/dev/drm/radeon/radeon_cs.c:83",
    "sys/dev/drm/radeon/radeon_uvd.c:705"
  ],
  "artifacts": [
    "vce_null_relocs.c",
    "build.sh",
    "run.sh",
    "build.log",
    "run.log",
    "README.md",
    "VERDICT.md",
    "fix.diff",
    "manifest.json",
    "verdict.json"
  ]
}