Lucene search
+L

7 matches found

OSV
OSV
•added 2026/05/28 9:36 a.m.•15 views

CVE-2026-46171 riscv: kvm: fix vector context allocation leak

In the Linux kernel, the following vulnerability has been resolved: riscv: kvm: fix vector context allocation leak When the second kzalloc hostcontext.vector.datap fails in kvmriscvvcpuallocvectorcontext, the first allocation guestcontext.vector.datap is leaked. Free it before returning...

5.9AI score
SaveExploits0References6
Cvelist
Cvelist
•added 2026/04/20 12:00 a.m.•49 views

CVE-2026-29645

NEMU OpenXiangShan/NEMU before v2025.12.r2 contains an improper instruction-validation flaw in its RISC-V Vector RVV decoder. The decoder does not correctly validate the funct3 field when decoding vsetvli/vsetivli/vsetvl, allowing certain invalid OP-V instruction encodings to be misinterpreted an...

0.00742EPSS
SaveExploits0References4
attackerkb
attackerkb
•added 2026/04/20 12:00 a.m.•18 views

CVE-2026-29645

NEMU OpenXiangShan/NEMU before v2025.12.r2 contains an improper instruction-validation flaw in its RISC-V Vector RVV decoder. The decoder does not correctly validate the funct3 field when decoding vsetvli/vsetivli/vsetvl, allowing certain invalid OP-V instruction encodings to be misinterpreted an...

5.9AI score0.00742EPSS
SaveExploits0References5
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/04/20 12:00 a.m.•0 views

CVE-2026-29645: Incorrect Calculation of Buffer Size

NEMU OpenXiangShan/NEMU before v2025.12.r2 contains an improper instruction-validation flaw in its RISC-V Vector RVV decoder. The decoder does not correctly validate the funct3 field when decoding vsetvli/vsetivli/vsetvl, allowing certain invalid OP-V instruction encodings to be misinterpreted an...

7.5CVSS5.8AI score0.00742EPSS
SaveExploits0References4
CVE
CVE
•added 2026/04/20 12:00 a.m.•26 views

CVE-2026-29645

The NEMU (OpenXiangShan/NEMU) simulator, prior to version v2025.12.r2 , is susceptible to an improper instruction-validation flaw within its RISC-V Vector (RVV) decoder . The root cause is the failure to correctly validate the funct3 field during the decoding of vsetvli, vsetivli, and vsetvl inst...

7.5CVSS5.9AI score0.00742EPSS
SaveExploits0References4Affected Software1
Cvelist
Cvelist
•added 2025/07/25 2:32 p.m.•28 views

CVE-2025-38435 riscv: vector: Fix context save/restore with xtheadvector

In the Linux kernel, the following vulnerability has been resolved: riscv: vector: Fix context save/restore with xtheadvector Previously only v0-v7 were correctly saved/restored, and the context of v8-v31 are damanged. Correctly save/restore v8-v31 to avoid breaking userspace...

7.8CVSS0.00149EPSS
SaveExploits0References2
Positive Technologies
Positive Technologies
•added 2025/05/15 12:00 a.m.•24 views

PT-2025-30842

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A flaw exists in the Linux kernel's RISC-V vector implementation related to context save and restore operations with xtheadvector. Previously, only registers v0-v7 were correctly saved a...

9.8CVSS6AI score0.00562EPSS
SaveExploits2References217
Rows per page
Query Builder