CNNVD-202507-088 Information

CNNVD ID

CNNVD-202507-088

CVE-2025-45006

  • CNNVD Published: 2025-07-01

Description (Chinese)

RISC-V Processor是瑞士RISC-V公司的一个指令集架构。 RISC-V Processor存在安全漏洞,该漏洞源于mstatus.SUM位保留不当导致物理内存访问攻击。

Description (English)

RISC-V Processor is a command collection structure of the Swiss company RISC-V. RISC-V Processor had a security loophole, which stemmed from the improper retention of mstatus.SUM, resulting in a physical memory access attack.

Hazard Level

Low

Vulnerability Type

其他

Affected Vendor

RISC-V

Published

2025-07-01

Last Modified

2026-02-24

References

https://github.com/heyfenny/Vulnerability_disclosure/blob/main/RISCV/Rocket-chip/CVE-2025-45006/details.md https://github.com/chipsalliance/rocket-chip.git https://lf-riscv.atlassian.net/wiki/spaces/HOME/pages/16154769/RISC-V+Technical+Specifications#ISA-Specifications https://access.redhat.com/security/cve/cve-2025-45006

Share on: