Skip to content
OpenAdvisories
Critical · 9.8 CVE-2026-29646 EUVD-2026-23958GHSA-729m-5x6m-wwxv

In OpenXiangShan NEMU prior to 55295c4, when running with RVH (Hypervisor extension) enabled, a VS-mode guest write to the supervisor inter…

Published Apr 20, 2026 · Updated Apr 21, 2026 · Assigned by mitre

Description

In OpenXiangShan NEMU prior to 55295c4, when running with RVH (Hypervisor extension) enabled, a VS-mode guest write to the supervisor interrupt-enable CSR (sie) may be handled incorrectly and can influence machine-level interrupt enable state (mie). This breaks privilege/virtualization isolation and can lead to denial of service or privilege-boundary violation in environments relying on NEMU for correct interrupt virtualization.

References