DF-5085
AcpiOsMapMemory's NULL failure contract is dead code β pmap_mapdev panics on KVA exhaustion instead of returning NULL, converting ACPICA's graceful AE_NO_MEMORY degradation into an unrecoverable kernel panic with firmware/AML-controlled mapping volume
Summary
The NULL check is unreachable (pmap_mapdev panics on kmem_alloc_nofault==0) while ACPICA's exregion explicitly handles NULL as AE_NO_MEMORY - firmware-controlled SystemMemory opregion volume or KVA pressure bricks instead of degrading. Fallible-mapping fix sketched.
Discussion (0)
PoC verification
Evidence pack
findings/poc/DF-5085 Β· 1 files| File | Type | Description | Size | |
|---|---|---|---|---|
| verdict.json | file | 946 B | view raw |
Fix verification
not_testablebaseline noβ patch + rebuild βpatched clean
per-fix-DF-5085
Confirmed kernel references
Detail
Evidence (decisive lines)
code-trace proof in finding markdown (path:line)
Verified recommended fix
see finding markdown
Verdict
untested (Low/Info hardening; no unprivileged trigger or hardware-gated)
No comments yet.