Vulnerability in N/a
CVE-2026-29642
A local attacker who can execute privileged CSR operations (or can induce firmware to do so) performs carefully crafted reads/writes to menvcfg (e.g., csrrs in M-mode). On affected XiangShan versions (commit aecf601e803bfd2371667a3fb60bfcd…
EPSS: 0.000 (2.8th percentile) — read the EPSS interpretation.
Affected products
- N/a — versions n/a