This vulnerability in OpenXiangShan NEMU occurs when a VS-mode guest writes to the supervisor interrupt-enable CSR (sie) while RVH is enabled. The write operation may improperly affect the machine-level interrupt enable state (mie), violating expected privilege and virtualization boundaries. This can disrupt correct interrupt virtualization, leading to denial of service or privilege escalation scenarios within virtualized environments using NEMU. The issue affects versions prior to commit 55295c4. No CVSS score or vendor advisory with remediation details is available at this time.

The vulnerability compromises the isolation between virtual supervisor mode and machine-level interrupt controls, potentially allowing a guest to influence machine-level interrupt enable state improperly. This can result in denial of service or breaches of privilege boundaries in virtualized environments dependent on NEMU's interrupt virtualization. No known exploits have been observed in the wild.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until an official fix is released, users should monitor vendor communications for updates. No specific mitigation steps are provided in the available data.