{
  "_pruva_terminal_reconciliation": {
    "authored_artifact_closure_sha256": "3f2adf5f421f27b926a0b08001bd72e4547788fdfcef0ca27a9e911388f5ed56",
    "authored_runtime_manifest_sha256": "04054f9ee9a40918467298739f4f28c68eebd2be2a41b316b71303e378dd5408",
    "authored_verdict_sha256": "bf92779e32437e8a38fcf78b36219f063d0804a510627d37d194a287f9dcefb3",
    "claim_matching": "evaluated",
    "schema_version": 2,
    "status": "completed"
  },
  "accepted_exploit_knowledge_record_ids": [
    "f1cee051-77aa-4e98-918b-b69ae1d574a9"
  ],
  "attacker_controlled_input": "local trigger of iwlwifi nic-init failure (iwl_pcie_tx_init) followed by driver teardown/retry; reproduced hardware-independently via an in-driver selftest hook that runs the real iwl_pcie_rx_free() unwind+retry sequence",
  "claim_outcome": "confirmed",
  "claimed_impact_class": "memory_corruption",
  "claimed_surface": "local_only",
  "crash_observed": true,
  "end_to_end_target_reached": true,
  "evidence_scope": "realistic_harness",
  "exploit_chain_demonstrated": false,
  "exploitability_confidence": "medium",
  "inferred": false,
  "observed_impact_class": "memory_corruption",
  "read_write_primitive_observed": false,
  "repro_result": "confirmed",
  "sanitizer_used": true,
  "trigger_path": "iwl_pcie_nic_init -> iwl_pcie_tx_init failure unwind -> iwl_pcie_rx_free (1st free, pointers left non-NULL) -> later teardown/retry -> iwl_pcie_rx_free re-entry -> KASAN UAF read in iwl_pcie_free_rbs_pool, BAD_PAGE from repeated __free_pages, fatal oops in iwl_pcie_free_rxq_dma",
  "validated_surface": "local_only"
}