{"finding_id":"DF-4831","status":"untested","attempts":0,"reproduced":0,"impact":"panic","confidence":"certain","verdict":"Latent hardening (DF-1913 family, distinct sites): hwmgr_hw_fini checks only !hwmgr||!pm_en then derefs hwmgr->hwmgr_func->backend_fini and pptable_func->pptable_fini with no NULL test - while every phm_* helper alongside is PHM_FUNC_CHECK-protected and hw_init preflights both pointers. Latent because every chip path in hwmgr_early_init assigns both tables or aborts the probe (verified for CI/CZ/AI/RV/VI). Mirror-the-preflight one-line fix.","exploit_chain":"none in-tree (requires a future chip path leaving a table NULL with pm_en true, then unload/reset NULL-derefs)","evidence":"findings/poc/DF-4831/ (this verdict)","kernel_refs":["sys/dev/drm/amd/powerplay/hwmgr/hwmgr.c:278","sys/dev/drm/amd/powerplay/hwmgr/hwmgr.c:280"],"guest_uname":"","code_hash":""}