CVE-2026-29646

Katalog CVE

CVSS 9.8 · Critical EPSS 0,68%

Kerentanan Privilege Defined With Unsafe Actions. Skor CVSS 3.1 9.8 (Critical) menurut CISA ADP.

Deskripsi (NVD)

In OpenXiangShan NEMU prior to 55295c4, when running with RVH (Hypervisor extension) enabled, a VS-mode guest write to the supervisor interrupt-enable CSR (sie) may be handled incorrectly and can influence machine-level interrupt enable state (mie). This breaks privilege/virtualization isolation and can lead to denial of service or privilege-boundary violation in environments relying on NEMU for correct interrupt virtualization.

Rincian

Terbit di NVD

20 April 2026

Terakhir diubah

17 Juni 2026

Status NVD

Deferred

CVSS 3.1

9.8 (Critical), sumber CISA ADP
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H · uraikan di kalkulator

Jenis kelemahan (CWE)

CWE-267: Privilege Defined With Unsafe Actions

EPSS (30 hari)

0,68% peluang dieksploitasi; lebih tinggi dari 51,2% CVE lain

Produk dan versi terdampak

NVD belum mencantumkan data produk (CPE) untuk CVE ini. Produk yang terdampak biasanya disebut di deskripsi dan di advisory vendor pada daftar referensi.

Referensi dan perbaikan

• https://docs.riscv.org/reference/isa/priv/hypervisor.html
• https://docs.riscv.org/reference/isa/priv/machine.html
• https://docs.riscv.org/reference/isa/priv/supervisor.html
• https://docs.riscv.org/reference/isa/unpriv/zicsr.html
• https://github.com/OpenXiangShan/NEMU/issues/951
• https://github.com/OpenXiangShan/NEMU/pull/938
• https://github.com/OpenXiangShan/NEMU/pull/938/commits/55295c46580456d8d5a9d5736e1fda924b8825ab