OpenRISC mor1kx security vulnerability

mor1kx is an OpenRISC 1000 processor IP core open-sourced by OpenRISC. A security vulnerability exists in OpenRISC mor1kx that stems from the subtraction instruction feed flags of the ALU unit not being updated correctly, resulting in an incorrect value for the feed flags...

CVE-2021-41614

An issue was discovered in the controller unit of the OpenRISC mor1kx processor. The read/write access permissions to the Exception Program Counter Register EPCR are not implemented correctly. User programs from an unauthorized privilege level can make read/write accesses to EPCR...

CVE-2021-40507

The CVE-2021-40507 issue affects the OR1200/OpenRISC 1200 ALU: the subtraction instruction fails to update the overflow flag, yielding an incorrect flag value. Affected hardware: OR1200/OpenRISC 1200 processors with versions from 2011-09-10 through 2015-11-11. Impact: software relying on the over...

CVE-2021-41613

CVE-2021-41613 concerns the OpenRISC mor1kx processor: the controller unit’s write logic for the Exception Effective Address Register (EEAR) is not implemented correctly, causing user programs from authorized privilege levels to be unable to write to EEAR. The documented impact is limited to this...

OR1200 Authorization Issue Vulnerability

OR1200 is an OpenRISC 1200 implementation of the OpenRISC open source. A security vulnerability exists in OR1200 that stems from the overflow flag of a subtraction instruction in an ALU unit not being updated correctly, resulting in an incorrect value in the overflow flag...

OR1200 Authorization Issue Vulnerability

OR1200 is an OpenRISC 1200 implementation of the OpenRISC open source. A security vulnerability exists in OR1200 that stems from the ALU unit not updating the overflow flags for the msb and mac instructions, resulting in incorrect values in the overflow flags...

CVE-2021-40506

Summary of CVE-2021-40506 (OR1200/OpenRISC 1200) : The ALU unit fails to update the overflow flag for the msb and mac instructions in OR1200 processors dated 2011-09-10 through 2015-11-11, causing an incorrect overflow flag value. This can lead to execution corruption in software that relies on t...

CVE-2021-41613: Undefined Security Weakness

An issue was discovered in the controller unit of the OpenRISC mor1kx processor. The write logic of Exception Effective Address Register EEAR is not implemented correctly. User programs from authorized privilege levels will be unable to write to EEAR...