CVE-2026-71694: n/a

This vulnerability affects the BOOM / BoomTile RTL benchmark v1.2, specifically in the ProcessorFuzz BOOM benchmark Verilog file SmallBoomTile_v1.2_state.v. The flaw lies in the control and status register (CSR) trap-return state restoration logic, MRET instruction handling, mstatus.MPRV update path, and CSRFile logic. Exploitation allows remote attackers to execute arbitrary code, impacting system confidentiality, integrity, and availability. The CVSS 3.1 vector indicates network attack vector, low attack complexity, no privileges required, user interaction required, unchanged scope, and high impact on confidentiality, integrity, and availability. There is no information on patches or vendor advisories.

Successful exploitation enables remote code execution, leading to full compromise of the affected system's confidentiality, integrity, and availability. This can result in unauthorized control and potentially severe operational disruption.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. No official fix or patch information is provided in the available data. Until a patch is available, cautious use and monitoring of affected components is advised.