CVE-2026-29643 Details

A vulnerability exists in the XiangShan open-source RISC-V processor, specifically in the CSR subsystem (NewCSR), as of commit edb1dfaf7d290ae99724594507dc46c2c2125384. The issue stems from improper handling of exceptional conditions, where certain sequences of CSR operations targeting non-existent or custom CSR addresses can trigger an illegal-instruction exception. However, the processor fails to consistently transfer control to the designated trap handler, disrupting the control flow and potentially leaving the core in a hung or unrecoverable state. This vulnerability can be exploited by a local attacker with the ability to execute code on the processor, leading to a denial-of-service condition and possibly an inconsistent architectural state.

The vulnerability has been fixed in a subsequent commit. Users should update to the latest version of the XiangShan processor.