VulnSocial

CVE-2026-29642Disclosure

LOWCVSS 7.8 · HIGH

Signal is active with 2 mentions in latest observed window

Immediate actions

  • Track advisory updates for patch or workaround availability

Recommended action window: Monitor and triage in normal cycle

NVD description

A local attacker who can execute privileged CSR operations (or can induce firmware to do so) performs carefully crafted reads/writes to menvcfg (e.g., csrrs in M-mode). On affected XiangShan versions (commit aecf601e803bfd2371667a3fb60bfcd83c333027, 2024-11-19), these menvcfg accesses can unexpectedly set WPRI (reserved) bits in the status view (xstatus) to 1. RISC-V defines WPRI fields as "writes preserve values, reads ignore values," i.e., they must not be modified by software manipulating other fields, and menvcfg itself contains multiple WPRI fields.

Back to dashboard
0.0/ 10 priority

Sources & remediation

Other references
Weakness type (CWE)
CWE-1244

Priority

LOW

Exploitation

NONE

PoC

NONE

Patch

NONE

Momentum

NONE

Threat summary

  • 2 mentions across 1 observed day

What's happening

  • Technical details provided in 2 signals
  • Disclosure: 2 classified signals
  • 2 total mentions across 1 day

Deep dive

Activity timeline2 mentions / 1d
01122Mentions · 2026-04-21: 2Technical Details · 2026-04-21: 204-21
Signal classification1 categories
Disclosure
2100.0%
Referenced assets2 URLs
By indicator
Full discourse2 posts
  • Infoflowcloud@infoflowcloud
    Disclosure

    🚨*CVE* CVE-2026-29642 A local attacker who can execute privileged CSR operations (or can induce firmware to do so) performs carefully crafted reads/writes to menvcfg (e.g., csrrs in M-mode… https://www.cve.org/CVERecord?id=CVE-2026-29642 ----- Traducción: CVE-2026-29642 Un … http://infoflow.cloud`

    Post summary

    The post discloses CVE-2026-29642, describing a local privilege escalation via CSR operations on menvcfg, but provides no PoC, exploit, patch, or indication of active exploitation.

    0000020
    72 followersView on X
  • CVE@CVEnew
    Disclosure

    CVE-2026-29642 A local attacker who can execute privileged CSR operations (or can induce firmware to do so) performs carefully crafted reads/writes to menvcfg (e.g., csrrs in M-mode… https://www.cve.org/CVERecord?id=CVE-2026-29642

    Post summary

    The excerpt outlines CVE‑2026‑29642, detailing that a local attacker can exploit privileged CSR operations to manipulate menvcfg. It contains no mention of a PoC, exploit code, active attacks, patches, or a false‑positive claim.

    00000128
    57.2K followersView on X

Explore more

Back to dashboard