CVE-2021-41612

High

Description

An issue was discovered in the ALU unit of the OpenRISC mor1kx processor. The carry flag is not being updated correctly for the subtract instruction, which results in an incorrect value of the carry flag. Any software that relies on this flag may experience corruption in execution.

SeverityHigh
CVSS8.8
Exploit probability—
ProductOpenrisc Mor1kx Firmware
PublishedApr 18, 2023
First seenApr 18, 2023

How to fix

Update
  • openrisc mor1kx_firmware5.1 or later

Affected products

ProductAffected versionsFixed in
openrisc mor1kx_firmwarev < 5.15.1

Check your version

Choose the product and enter the version you run to see whether it falls in the affected range.

In the Intelligence 360 plan

Attack Surface Management

See the assets tied to your domains, the technologies they run and known vulnerabilities in one list.