Signal is active with 2 mentions in latest observed window
Recommended action window: Monitor and triage in normal cycle
NVD description
In OpenXiangShan NEMU, insufficient Smstateen permission enforcement allows lower-privileged code to access IMSIC state via stopei/vstopei CSRs even when mstateen0.IMSIC is cleared, potentially enabling cross-context information leakage or disruption of interrupt handling.
Priority
LOW
Exploitation
NONE
PoC
NONE
Patch
NONE
Momentum
NONE
CVE-2026-29647 In OpenXiangShan NEMU, insufficient Smstateen permission enforcement allows lower-privileged code to access IMSIC state via stopei/vstopei CSRs even when http://mstateen0.IM… https://www.cve.org/CVERecord?id=CVE-2026-29647
Post summary
The post announces that CVE‑2026‑29647 in OpenXiangShan NEMU is a permission‑elevation flaw permitting lower‑privileged code to read IMSIC state through certain CSRs.
🚨*CVE* CVE-2026-29647 In OpenXiangShan NEMU, insufficient Smstateen permission enforcement allows lower-privileged code to access IMSIC state via stopei/vstopei CSRs even when http://mstateen0.IM… https://www.cve.org/CVERecord?id=CVE-2026-29647 ----- Traducción: CVE-202… http://infoflow.cloud`
Post summary
The post references CVE-2026-29647, describing a permission enforcement weakness in OpenXiangShan NEMU that lets lower‑privileged code read IMSIC state via specific CSRs, without mentioning any PoC, exploit, or patch.