{
 "finding_id": "DF-4719",
 "title": "pending CMFREE event vs aac_cam_detach sim free - UAF on release path",
 "verdict": "untested (hw-gated, speculative)",
 "impact": "kernel UAF (root-triggered detach + exhausted FIB pool)",
 "reproduce": {
  "build": "n/a (requires AAC hardware)",
  "run": "n/a",
  "expected": "n/a"
 },
 "kernel_refs": [
  "sys/dev/raid/aac/aac_cam.c:165",
  "sys/dev/raid/aac/aac_cam.c:206"
 ],
 "artifacts": [
  "README.md",
  "fix.diff",
  "verdict.json",
  "manifest.json"
 ]
}