CVE-2022-34637

CVE-2022-34637 affects CVA6 (OpenHW Group) where loading an illegal virtual address triggers an incorrect exception type due to commit d315ddd0f1be27c1b3f27eb0b8daf471a952299a. Descriptions across sources confirm the same root cause; no explicit mitigation or patched version is provided in the co...

CVE-2022-34641

CVE-2022-34641 affects CVA6 and RISCV-Boom due to an incorrect exception type emitted when a PMP violation occurs during address translation. Affected commits: CVA6 d315ddd0f1be27c1b3f27eb0b8daf471a952299a and RISCV-Boom ad64c5419151e5e886daee7084d8399713b46b4b. Consequence: this mismatch could l...

CVE-2022-34636

CVE-2022-34636 affects CVA6 and RISCV-Boom. The root issue is the use of an incorrect exception type when a PMA violation occurs during address translation. This is documented across multiple sources referencing the same commit set (CVA6 d315ddd0f1be27c1b3f27eb0b8daf471a952299a and RISCV-Boom ad6...

CVE-2022-34640

CVE-2022-34640 refers to CVA6 (OpenHW Group) where the value of tval for ecall/ebreak was found incorrect in commit d315ddd0f1be27c1b3f27eb0b8daf471a952299a. Multiple sources (NVD, Red Hat advisories, CVE lists) corroborate this description. The NVD entry lists a CVSS v3.1 base score of 5.5 (Medi...

CVE-2022-34633

CVE-2022-34633 affects CVA6 (OpenHW Group) with a flaw in sfence.vma handling caused by a crafted or incorrectly formatted sfence.vma instruction in commit d315ddd0f1be27c1b3f27eb0b8daf471a952299a. The CVSSv3.1 vector (AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H) indicates a local, low-privilege conditio...

CVE-2022-34639

CVE-2022-34639 concerns the CVA6 RISC-V core. The issue arises from how non-standard fence instructions are treated as illegal, which can affect the function of the application. Documents consistently describe the root cause as the handling of fence instructions, with the observed impact being a ...

CVE-2022-34634

The CVE concerns CVA6 (OpenHW Group CVA6 CPU). Affected component: the CVA6 implementation. Root cause: a commit (d315ddd0f1be27c1b3f27eb0b8daf471a952299a) handles det instructions in a crafted or incorrectly formatted way, causing an exception to be created instead of the intended behavior. Impa...

CVE-2022-34635

CVE-2022-34635 affects the CVA6 OpenHW core. The mstatus.sd field does not update when mstatus.fs is set to Dirty in commit d315ddd0f1be27c1b3f27eb0b8daf471a952299a. Documents indicate this is a vulnerability in the CVA6 design/implementation, with an NVD CVSS v3.1 base score of 9.8 (critical) an...

CVE-2022-33021

CVE-2022-33021 affects CVA6 (OpenHW Group) where committing 909d85a allows an invalid memory read when accessing MHPMCOUNTER30. The NVD entry lists CVSSv3.1 base score 7.5 (Network, Low complexity, None privileges, High confidentiality impact) and CVSSv2 base score 5.0 (Partial confidentiality). ...

CVE-2022-33023

CVE-2022-33023 affects the OpenHW CVA6 CPU. The issue originates from commit 909d85a, which “gives incorrect permission to use special multiplication units when the format of instructions is wrong.” The connected records corroborate this description across Red Hat, NVD, CVE lists, and regional no...