Lucene search
+L

7 matches found

OSV
OSV
•added 2026/05/28 9:36 a.m.•18 views

CVE-2026-46171 riscv: kvm: fix vector context allocation leak

In the Linux kernel, the following vulnerability has been resolved: riscv: kvm: fix vector context allocation leak When the second kzalloc hostcontext.vector.datap fails in kvmriscvvcpuallocvectorcontext, the first allocation guestcontext.vector.datap is leaked. Free it before returning...

5.9AI score
SaveExploits0References6
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/04/20 12:00 a.m.•6 views

CVE-2026-29645: Incorrect Calculation of Buffer Size

NEMU OpenXiangShan/NEMU before v2025.12.r2 contains an improper instruction-validation flaw in its RISC-V Vector RVV decoder. The decoder does not correctly validate the funct3 field when decoding vsetvli/vsetivli/vsetvl, allowing certain invalid OP-V instruction encodings to be misinterpreted an...

7.5CVSS5.9AI score0.00742EPSS
SaveExploits0References4
Cvelist
Cvelist
•added 2026/04/20 12:00 a.m.•53 views

CVE-2026-29645

NEMU OpenXiangShan/NEMU before v2025.12.r2 contains an improper instruction-validation flaw in its RISC-V Vector RVV decoder. The decoder does not correctly validate the funct3 field when decoding vsetvli/vsetivli/vsetvl, allowing certain invalid OP-V instruction encodings to be misinterpreted an...

0.00742EPSS
SaveExploits0References4
CVE
CVE
•added 2026/04/20 12:00 a.m.•30 views

CVE-2026-29645

The NEMU (OpenXiangShan/NEMU) simulator, prior to version v2025.12.r2 , is susceptible to an improper instruction-validation flaw within its RISC-V Vector (RVV) decoder . The root cause is the failure to correctly validate the funct3 field during the decoding of vsetvli, vsetivli, and vsetvl inst...

7.5CVSS5.9AI score0.00742EPSS
SaveExploits0References4Affected Software1
attackerkb
attackerkb
•added 2026/04/20 12:00 a.m.•18 views

CVE-2026-29645

NEMU OpenXiangShan/NEMU before v2025.12.r2 contains an improper instruction-validation flaw in its RISC-V Vector RVV decoder. The decoder does not correctly validate the funct3 field when decoding vsetvli/vsetivli/vsetvl, allowing certain invalid OP-V instruction encodings to be misinterpreted an...

5.9AI score0.00742EPSS
SaveExploits0References5
Cvelist
Cvelist
•added 2025/07/25 2:32 p.m.•32 views

CVE-2025-38435 riscv: vector: Fix context save/restore with xtheadvector

In the Linux kernel, the following vulnerability has been resolved: riscv: vector: Fix context save/restore with xtheadvector Previously only v0-v7 were correctly saved/restored, and the context of v8-v31 are damanged. Correctly save/restore v8-v31 to avoid breaking userspace...

7.8CVSS0.00149EPSS
SaveExploits0References2
Positive Technologies
Positive Technologies
•added 2025/05/15 12:00 a.m.•26 views

PT-2025-30842

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A flaw exists in the Linux kernel's RISC-V vector implementation related to context save and restore operations with xtheadvector. Previously, only registers v0-v7 were correctly saved a...

9.8CVSS6AI score0.00562EPSS
SaveExploits2References217
Rows per page
Query Builder