⬢ DragonFlyBSD Kernel Audit
DF-4928 / manifest.json
← back to finding ↓ download raw
{
  "finding_id": "DF-4928",
  "title": "corepower_probe family-0x06 skip-guard lets non-family-06 Intel CPUIDs probe/attach-attempt incl. raw rdmsr (hardening)",
  "verdict": "reproduced_live_benign",
  "impact_assessed": "Info (hardening; no #GP reachable - all sensor MSRs rdmsr_safe-gated)",
  "reproduce": {
    "build": "sh build.sh   (no-op; module shipped as /boot/kernel/corepower.ko)",
    "run": "sh trigger.sh   (root: kldload corepower; dmesg; kldunload; uptime)",
    "expected": "dmesg: 'corepower0: <CPU On-Die Power Usage Estimation> on cpu5' + 'device_probe_and_attach: corepower0 attach returned 6' on the Family=0xf guest CPU; no sensors; no panic; guest alive"
  },
  "kernel_refs": [
    "sys/dev/powermng/corepower/corepower.c:165-197",
    "sys/dev/powermng/corepower/corepower.c:199",
    "sys/dev/powermng/corepower/corepower.c:273",
    "sys/dev/powermng/corepower/corepower.c:331-332"
  ],
  "artifacts": [
    "trigger.sh", "build.sh", "run.log", "env.txt", "fix.diff",
    "VERDICT.md", "README.md", "manifest.json", "verdict.json"
  ]
}