CVE-2026-29642

The XiangShan RISC-V processor project (specifically versions involving commit aecf601e803bfd2371667a3fb60bfcd83c333027 , dated 2024-11-19) is vulnerable to a flaw where a local attacker with privileged CSR execution capabilities can perform crafted reads or writes to menvcfg (e.g., using csrrs i...