PT-2022-22258 · Cva6 · Cva6

Phantom1003 · Published 2022-07-18 · Updated 2022-07-26 · CVE-2022-34635

Positive Technologies (AI Summary)

CVSS v3.1

9.8

Critical

Base vector

AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions CVA6 version d315ddd0f1be27c1b3f27eb0b8daf471a952299a

Description The issue is related to the mstatus.sd field not updating when the mstatus.fs field is set to Dirty in the CVA6 commit.

Recommendations For version d315ddd0f1be27c1b3f27eb0b8daf471a952299a, as a temporary workaround, consider monitoring the mstatus.fs field to ensure it does not interfere with the expected functionality of the mstatus.sd field until a patch is available. At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Exploit

Related Identifiers

CVE-2022-34635

Affected Products

Cva6

References · 7

• 🔥 https://github.com/openhwgroup/cva6/issues/917 · Exploit
• https://osv.dev/vulnerability/CVE-2022-34635 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2022-34635 · Security Note
• https://t.me/cvenotify/33796 · Telegram Post
• https://t.me/cvenotify/33348 · Telegram Post
• https://t.me/cvenotify/33361 · Telegram Post
• https://t.me/cibsecurity/46527 · Telegram Post