CVE-2026-29647

The OpenXiangShan NEMU (an open-source teaching system simulator) contains a security vulnerability due to insufficient Smstateen permission enforcement . This flaw allows lower-privileged code to access the IMSIC state using stopei/vstopei CSRs , even when mstateen0.IMSIC is cleared. The potenti...