⬢ DragonFlyBSD Kernel Audit
DF-5120 / manifest.json
← back to finding ↓ download raw 
 1
 2
 3
 4
 5
 6
 7
 8
 9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
{
  "finding_id": "DF-5120",
  "file": "sys/dev/virtual/virtio/random/virtio_random.c",
  "verdict": "untested",
  "impact": "none (potential: dos via host-side backend stall; not guest-attacker-reachable)",
  "confidence": "likely",
  "reproduce": {
    "build": "n/a - no runnable PoC (host-side trigger)",
    "run": "n/a",
    "expected": "If a virtio-rng device with a stalling backend were attached, the guest would hang within 5s of the first harvest with the softclock thread spinning in virtqueue_poll (virtqueue.c:578-579)"
  },
  "kernel_refs": [
    "sys/dev/virtual/virtio/random/virtio_random.c:142",
    "sys/dev/virtual/virtio/random/virtio_random.c:205",
    "sys/dev/virtual/virtio/random/virtio_random.c:214",
    "sys/dev/virtual/virtio/random/virtio_random.c:215",
    "sys/dev/virtual/virtio/random/virtio_random.c:229",
    "sys/dev/virtual/virtio/virtio/virtqueue.c:572"
  ],
  "artifacts": [
    "README.md",
    "VERDICT.md",
    "fix.diff",
    "verdict.json",
    "manifest.json"
  ]
}