Vulnerability in N/a
CVE-2026-29649
NEMU contains an implementation flaw in its RISC-V Hypervisor CSR handling where henvcfg[7:4] (CBIE/CBCFE/CBZE-related fields) is incorrectly masked/updated based on menvcfg[7:4], so a machine-mode write to menvcfg can implicitly modify th…
EPSS: 0.000 (7.8th percentile) — read the EPSS interpretation.
Affected products
- N/a — versions n/a