CVE-2026-29648

A security vulnerability exists in OpenXiangShan NEMU , an open-source teaching system simulator. When Smstateen is enabled, clearing mstateen0.ENVCFG fails to correctly restrict access to the henvcfg and senvcfg control status registers (CSRs). This flaw allows less-privileged code to read or wr...