CVE-2026-29649

Katalog CVE

CVSS 9.8 · Critical EPSS 0,66%

Kerentanan Protection Mechanism Failure pada xiangshan nemu. Skor CVSS 3.1 9.8 (Critical) menurut CISA ADP.

Deskripsi (NVD)

NEMU contains an implementation flaw in its RISC-V Hypervisor CSR handling where henvcfg[7:4] (CBIE/CBCFE/CBZE-related fields) is incorrectly masked/updated based on menvcfg[7:4], so a machine-mode write to menvcfg can implicitly modify the hypervisor's environment configuration. This can lead to incorrect enforcement of virtualization configuration and may cause unexpected traps or denial of service when executing cache-block management instructions in virtualized contexts (V=1).

Rincian

Terbit di NVD

20 April 2026

Terakhir diubah

17 Juni 2026

Status NVD

Analyzed

CVSS 3.1

9.8 (Critical), sumber CISA ADP
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H · uraikan di kalkulator

Jenis kelemahan (CWE)

CWE-693: Protection Mechanism Failure

EPSS (30 hari)

0,66% peluang dieksploitasi; lebih tinggi dari 50,2% CVE lain

Produk dan versi terdampak

> Data dari konfigurasi CPE di NVD.

Referensi dan perbaikan

• https://github.com/OpenXiangShan/NEMU/pull/689 issue tracking · patch
• https://docs.riscv.org/reference/isa/priv/hypervisor.html product
• https://docs.riscv.org/reference/isa/priv/machine.html product
• https://github.com/OpenXiangShan/NEMU/issues/681 issue tracking