CVE-2026-67846

BOOM (Berkeley Out-of-Order Machine) contains a potential incorrect privilege assignment vulnerability in its v3 and v4 NBDTLB implementations, identified at commit 5223e44c. The root cause is that the raw mstatus.SUM value participates in read and write permission logic without an explicit local...