Vulnerability in N/a

CVE-2026-29648

In OpenXiangShan NEMU, when Smstateen is enabled, clearing mstateen0.ENVCFG does not correctly restrict access to henvcfg and senvcfg. As a result, less-privileged code may read or write these CSRs without the required exception, potential…

EPSS: 0.000 (15.1th percentile) — read the EPSS interpretation.

Affected products

  • N/a — versions n/a

References