PT-2022-21651 · Cva6 · Cva6

Chenc6 · Published 2022-06-29 · Updated 2022-07-08 · CVE-2022-33023

Positive Technologies (AI Summary)

CVSS v3.1

7.5

High

Base vector

AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N

Name of the Vulnerable Software and Affected Versions CVA6 version 909d85a

Description The issue arises from CVA6 commit 909d85a, which incorrectly grants permission to use special multiplication units when the instruction format is incorrect.

Recommendations For CVA6 version 909d85a, consider restricting access to special multiplication units until a patch is available to correct the permission issue.

Fix

Incorrect Default Permissions

Weakness Enumeration

CWE-276

Related Identifiers

CVE-2022-33023

Affected Products

Cva6

References · 5

• https://osv.dev/vulnerability/CVE-2022-33023 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2022-33023 · Security Note
• https://github.com/openhwgroup/cva6/issues/885 · Note
• https://t.me/cibsecurity/45360 · Telegram Post
• https://t.me/cvenotify/32774 · Telegram Post