PT-2022-21651

CVE-2022-33023

·

Published

2022-06-29

·

Updated

2022-07-08

Description by

CVSS 3.1
7.5
High
MetricsAV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N
Name of the Vulnerable Software and Affected Versions CVA6 version 909d85a
Description The issue arises from CVA6 commit 909d85a, which incorrectly grants permission to use special multiplication units when the instruction format is incorrect.
Recommendations For CVA6 version 909d85a, consider restricting access to special multiplication units until a patch is available to correct the permission issue.
Exploitability
Fix
Impacts
Researchers
Vendors
Affected products
Weakness enumeration
CWE-276: Incorrect Default Permissions
Related identifiers
CVE-2022-33023
Found an issue in the description? Have something to add? Feel free to write us 👾
dbugs@ptsecurity.com