Signal is active with 2 mentions in latest observed window
Recommended action window: Monitor and triage in normal cycle
NVD description
NEMU contains an implementation flaw in its RISC-V Hypervisor CSR handling where henvcfg[7:4] (CBIE/CBCFE/CBZE-related fields) is incorrectly masked/updated based on menvcfg[7:4], so a machine-mode write to menvcfg can implicitly modify the hypervisor's environment configuration. This can lead to incorrect enforcement of virtualization configuration and may cause unexpected traps or denial of service when executing cache-block management instructions in virtualized contexts (V=1).
Priority
LOW
Exploitation
NONE
PoC
NONE
Patch
AVAILABLE
Momentum
NONE
If you run products in this scope, you should treat this CVE as relevant to your environment.
1 version affected across 1 product
CVE-2026-29649 NEMU contains an implementation flaw in its RISC-V Hypervisor CSR handling where henvcfg[7:4] (CBIE/CBCFE/CBZE-related fields) is incorrectly masked/updated based on … https://www.cve.org/CVERecord?id=CVE-2026-29649
Post summary
The post announces CVE‑2026‑29649 as an implementation flaw in the NEMU RISC‑V hypervisor CSR handling but offers no details on exploitation, mitigation, or evidence of active use.
🚨*CVE* CVE-2026-29649 NEMU contains an implementation flaw in its RISC-V Hypervisor CSR handling where henvcfg[7:4] (CBIE/CBCFE/CBZE-related fields) is incorrectly masked/updated based on … https://www.cve.org/CVERecord?id=CVE-2026-29649 ----- Traducción: CVE-2026-29649 NEM… http://infoflow.cloud`
Post summary
The message announces CVE‑2026‑29649, detailing an implementation flaw in a RISC‑V hypervisor CSR, but does not provide PoC, exploit, patch, or evidence of active exploitation.
1 of 1 entries
| Part | Vendor | Product | Version | Target SW | Target HW |
|---|---|---|---|---|---|
| App | xiangshan | nemu | - | - | - |