{
  "finding_id": "DF-4983",
  "verdict": "untested",
  "impact": "latent UAF-enabler (gated: Conexant cxm hardware)",
  "reproduce": {
    "build": "n/a — kernel driver defect; trigger is unpriv ioctl loop vs kldunload cxm on card-equipped hardware",
    "run": "user$: while :; do sensor ioctl on /dev/cxm0; done & root#: kldunload cxm",
    "expected": "on equipped hardware: in-flight iicbus_start()/write() on freed device_t (UAF); on this guest: unreachable (no card)"
  },
  "kernel_refs": [
    "sys/dev/video/cxm/cxm_i2c.c:229",
    "sys/dev/video/cxm/cxm.c:2115-2118",
    "sys/dev/video/cxm/cxm.c:2060-2068",
    "sys/dev/video/cxm/cxm_saa7115.c:678"
  ],
  "artifacts": [
    "README.md",
    "VERDICT.md",
    "df4983_cxm_iic_stale_ivar.c",
    "env.txt",
    "verdict.json",
    "fix.diff",
    "manifest.json"
  ]
}