{
  "finding_id": "DF-4950",
  "status": "untested",
  "attempts": 0,
  "reproduced": 0,
  "impact": "dos",
  "confidence": "likely",
  "verdict": "Low (wedge precondition = DF-3773 class + root detach/reboot): ahci_os_stop_port waits for the port thread with NO timeout - a wedged thread (port-lock deadlock, dead hw) turns kldunload/detach/shutdown into a permanent unkillable kernel hang; additionally only 1 of the 3 per-port locks (ap_lock) is ever lockuninited (ap_sim_lock/ap_sig_lock leak per attach/detach cycle). Bounded-join-returning-EBUSY + uninit-all-three fix.",
  "exploit_chain": "wedged port thread -> detach/shutdown -> infinite while(ap_thread) join -> permanent shutdown hang",
  "evidence": "findings/poc/DF-4950/ (this verdict)",
  "kernel_refs": [
    "sys/dev/disk/ahci/ahci_dragonfly.c:248-250",
    "sys/dev/disk/ahci/ahci_dragonfly.c:286-298",
    "sys/dev/disk/ahci/ahci.c:988"
  ],
  "guest_uname": "",
  "code_hash": ""
}