CVE-2026-0455: Medium severity vulnerability
The Versal™ AI Edge Series Gen 2 Peripheral Protection Unit (XPPU) for the inter-processor interrupt (IPI) buffers does not block unauthorized access as expected. This allows processors in the SoC with any IPI channel access the ability to both read and write to the entire IPI buffer register space as well as the IPI no-buffer register control space.
Event History
Frequently Asked Questions
Which systems are exposed?
Systems using the Versal AI Edge Series Gen 2 are affected where processors in the SoC have access to any inter-processor interrupt (IPI) channel. The issue concerns access controls on IPI buffer and no-buffer register spaces.
What level of access does an attacker need?
An attacker needs access through an IPI channel from a processor in the SoC. A processor with any IPI channel access can read from and write to the entire IPI buffer register space and the IPI no-buffer register control space.
What impact can unauthorized access have?
Unauthorized processors can read and modify IPI buffer registers and IPI no-buffer control registers outside the access restrictions expected from the Peripheral Protection Unit. The supplied severity information indicates potential impacts to confidentiality, integrity, and availability.