CyberRota Analysis
AI-GeneratedThe vulnerability affects the v3 and v4 NBDTLB implementations in the Berkeley Out-of-Order Machine, where an incorrect privilege assignment may occur due to the raw mstatus.SUM value being used in permission logic without proper validation. This could lead to unauthorized access or privilege escalation, potentially compromising system integrity. Developers and organizations utilizing the affected BOOM implementations should prioritize addressing this issue to mitigate security risks.
Public Exploit Signal
A public exploit, PoC, GitHub repository or Metasploit reference was detected for this CVE.
Note: these links are listed for security research and verification purposes only.
Original NVD Description
Berkeley Out-of-Order Machine (BOOM) commit 5223e44cfeb26f41380057a2eb4d651197475f69 contains a potential incorrect privilege assignment issue in the v3 and v4 NBDTLB implementations. The raw mstatus.SUM value participates in the read and write permission logic without an explicit local satp.MODE validity check at the use site