CVE-2026-71694: CSRF

Published Aug 19, 2026

Updated

An issue in Berkeley Out-of-Order Machine (BOOM) / BoomTile RTL benchmark v1.2 2d08d0d8b4563212175212f9db0e69f6e68c9619 allows a remote attacker to execute arbitrary code via the CSR trap-return state restoration logic, MRET handling logic, mstatus.MPRV update path, CSRFile logic in ProcessorFuzz BOOM benchmark Benchmarks/Verilog/SmallBoomTilev1.2state.v

Affected Software

1 affected component

BOOM / BoomTile RTL benchmark=v1.2 2d08d0d8b4563212175212f9db0e69f6e68c9619

Remediation

Recommended actions to resolve this vulnerability, in priority order.

Upgrade
Upgrade BOOM / BoomTile RTL benchmark to a version that resolves this vulnerability.
Fixed in v1.2Patch 2d08d0d8b4563212175212f9db0e69f6e68c9619

Event History

Aug 19, 2026

CVE Published

via MITRE·12:00 AM

Data Sourced

via MITRE·12:00 AM

Description

Frequently Asked Questions

Which component should be checked for exposure?

The affected component identified in the available data is the ProcessorFuzz BOOM benchmark file Benchmarks/Verilog/SmallBoomTile_v1.2_state.v, associated with BOOM / BoomTile RTL benchmark v1.2 at commit 2d08d0d8b4563212175212f9db0e69f6e68c9619.

What execution path is implicated?

The issue involves CSR trap-return state restoration, MRET handling, updates to mstatus.MPRV, and CSRFile logic. The data states that exploitation can result in arbitrary code execution by a remote attacker.

CVE-2026-71694: CSRF

Affected Software

Remediation

Event History

Frequently Asked Questions

Which component should be checked for exposure?

What execution path is implicated?

Company

Resources

Contact

Frequently Asked Questions

Which component should be checked for exposure?

What execution path is implicated?