PT-2022-22256 · Cva6 · Cva6

Phantom1003 · Published 2022-07-18 · Updated 2022-07-26 · CVE-2022-34633

Positive Technologies (AI Summary)

CVSS v3.1

5.5

Medium

Base vector

AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

Name of the Vulnerable Software and Affected Versions CVA6 version d315ddd0f1be27c1b3f27eb0b8daf471a952299a

Description The issue arises when CVA6 commit d315ddd0f1be27c1b3f27eb0b8daf471a952299a executes crafted or incorrectly formatted sfence.vma instructions, which should create an exception.

Recommendations For CVA6 version d315ddd0f1be27c1b3f27eb0b8daf471a952299a, consider restricting the execution of crafted or incorrectly formatted sfence.vma instructions to minimize the risk of exploitation. At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Exploit

Improper Handling of Exceptional Conditions

Weakness Enumeration

CWE-755

Related Identifiers

CVE-2022-34633

Affected Products

Cva6

References · 8

• 🔥 https://github.com/openhwgroup/cva6/issues/876 · Exploit
• https://nvd.nist.gov/vuln/detail/CVE-2022-34633 · Security Note
• https://osv.dev/vulnerability/CVE-2022-34633 · Vendor Advisory
• https://github.com/openhwgroup/cva6/pull/921 · Note
• https://t.me/cvenotify/33363 · Telegram Post
• https://t.me/cvenotify/33350 · Telegram Post
• https://t.me/cvenotify/33799 · Telegram Post
• https://t.me/cibsecurity/46525 · Telegram Post