DF-0219
kcollect_setscale/setvalue mutate shared state without kcollect_lock
Summary
kcollect_setscale(:142)/setvalue(:130) write shared state no lock while sysctl reader + thread use lock. Torn 64-bit scale/data possible. amd64 aligned 64-bit atomic so unlikely. Data integrity.
Discussion (0)
PoC verification
Evidence pack
findings/poc/DF-0219 · 1 files| File | Type | Description | Size | |
|---|---|---|---|---|
| manifest.json | file | 393 B | view raw |
Fix verification
not_testablebaseline reproduced→ patch + rebuild →patched clean
recommended fix identified; fix.diff not authored/validated in this batch
recommended fix identified; fix.diff not authored/validated in this batch
combined build rc=0
Confirmed kernel references
—
Detail
Exploit chain
none (Info severity)
Evidence (decisive lines)
Source-confirmed at sys/kern/kern_collect.c:124: setscale/setvalue mutate shared state without kcollect_lock
Verified recommended fix
Source-confirmed at sys/kern/kern_collect.c:124: setscale/setvalue mutate shared state without kcollect_lock
Verdict
Source-confirmed at sys/kern/kern_collect.c:124: setscale/setvalue mutate shared state without kcollect_lock
No comments yet.