PatchTheCVE: cva6https://patchthecve.com/CVEs with upgrade or downgrade fix stepsCVE-2022-34641: CVA6 commit d315ddd0f1be27c1b3f27eb0b8daf471a952299a and RISCV-Boom commit ad64c5419151e5e886daee7084d8399713bhttps://patchthecve.com/cve/CVE-2022-34641.htmlhttps://patchthecve.com/cve/CVE-2022-34641.htmlWed, 17 Jun 2026 04:50:38 +0000MEDIUM 5.5: CVA6 commit d315ddd0f1be27c1b3f27eb0b8daf471a952299a and RISCV-Boom commit ad64c5419151e5e886daee7084d8399713b46b4b implements the incorrect exception type when a PMP violation occurs during address translation.CVE-2022-34640: The *tval of ecall/ebreak in CVA6 commit d315ddd0f1be27c1b3f27eb0b8daf471a952299a was discovered to be incorrehttps://patchthecve.com/cve/CVE-2022-34640.htmlhttps://patchthecve.com/cve/CVE-2022-34640.htmlWed, 17 Jun 2026 04:50:38 +0000MEDIUM 5.5: The *tval of ecall/ebreak in CVA6 commit d315ddd0f1be27c1b3f27eb0b8daf471a952299a was discovered to be incorrect.CVE-2022-34639: CVA6 commit d315ddd0f1be27c1b3f27eb0b8daf471a952299a treats non-standard fence instructions as illegal which chttps://patchthecve.com/cve/CVE-2022-34639.htmlhttps://patchthecve.com/cve/CVE-2022-34639.htmlWed, 17 Jun 2026 04:50:37 +0000MEDIUM 5.5: CVA6 commit d315ddd0f1be27c1b3f27eb0b8daf471a952299a treats non-standard fence instructions as illegal which can affect the function of the application.CVE-2022-34637: CVA6 commit d315ddd0f1be27c1b3f27eb0b8daf471a952299a implements an incorrect exception type when an illegal vihttps://patchthecve.com/cve/CVE-2022-34637.htmlhttps://patchthecve.com/cve/CVE-2022-34637.htmlWed, 17 Jun 2026 04:50:37 +0000MEDIUM 5.5: CVA6 commit d315ddd0f1be27c1b3f27eb0b8daf471a952299a implements an incorrect exception type when an illegal virtual address is loaded.CVE-2022-34636: CVA6 commit d315ddd0f1be27c1b3f27eb0b8daf471a952299a and RISCV-Boom commit ad64c5419151e5e886daee7084d8399713bhttps://patchthecve.com/cve/CVE-2022-34636.htmlhttps://patchthecve.com/cve/CVE-2022-34636.htmlWed, 17 Jun 2026 04:50:37 +0000MEDIUM 5.5: CVA6 commit d315ddd0f1be27c1b3f27eb0b8daf471a952299a and RISCV-Boom commit ad64c5419151e5e886daee7084d8399713b46b4b implements the incorrect exception type when a PMA violation occurs during address translation.CVE-2022-34635: The mstatus.sd field in CVA6 commit d315ddd0f1be27c1b3f27eb0b8daf471a952299a does not update when the mstatus.https://patchthecve.com/cve/CVE-2022-34635.htmlhttps://patchthecve.com/cve/CVE-2022-34635.htmlWed, 17 Jun 2026 04:50:37 +0000CRITICAL 9.8: The mstatus.sd field in CVA6 commit d315ddd0f1be27c1b3f27eb0b8daf471a952299a does not update when the mstatus.fs field is set to Dirty.CVE-2022-34634: CVA6 commit d315ddd0f1be27c1b3f27eb0b8daf471a952299a executes crafted or incorrectly formatted det instructionhttps://patchthecve.com/cve/CVE-2022-34634.htmlhttps://patchthecve.com/cve/CVE-2022-34634.htmlWed, 17 Jun 2026 04:50:37 +0000MEDIUM 5.5: CVA6 commit d315ddd0f1be27c1b3f27eb0b8daf471a952299a executes crafted or incorrectly formatted det instructions rather create an exception.CVE-2022-34633: CVA6 commit d315ddd0f1be27c1b3f27eb0b8daf471a952299a executes crafted or incorrectly formatted sfence.vma insthttps://patchthecve.com/cve/CVE-2022-34633.htmlhttps://patchthecve.com/cve/CVE-2022-34633.htmlWed, 17 Jun 2026 04:50:37 +0000MEDIUM 5.5: CVA6 commit d315ddd0f1be27c1b3f27eb0b8daf471a952299a executes crafted or incorrectly formatted sfence.vma instructions rather create an exception.CVE-2022-33023: CVA6 commit 909d85a gives incorrect permission to use special multiplication units when the format of instructhttps://patchthecve.com/cve/CVE-2022-33023.htmlhttps://patchthecve.com/cve/CVE-2022-33023.htmlWed, 17 Jun 2026 04:48:22 +0000HIGH 7.5: CVA6 commit 909d85a gives incorrect permission to use special multiplication units when the format of instructions is wrong.CVE-2022-33021: CVA6 commit 909d85a accesses invalid memory when reading the value of MHPMCOUNTER30.https://patchthecve.com/cve/CVE-2022-33021.htmlhttps://patchthecve.com/cve/CVE-2022-33021.htmlWed, 17 Jun 2026 04:48:22 +0000HIGH 7.5: CVA6 commit 909d85a accesses invalid memory when reading the value of MHPMCOUNTER30.