CVE-2025-50897
Last modified
CVE-2025-50897 is a medium-severity vulnerability rated 4.3/10 on the CVSS scale. A vulnerability exists in riscv-boom SonicBOOM 1.2 (BOOMv1.2) processor implementation, where valid virtual-to-physical address translations configured with write permissions (PTE_W) in SV39 mode may incorrectly trigger a Store/AMO access fault during store instructions (sd). This occurs despite the presence of proper page table entries and valid memory access modes. EPSS estimates a 0.25% chance of exploitation in the next 30 days.
Description
A vulnerability exists in riscv-boom SonicBOOM 1.2 (BOOMv1.2) processor implementation, where valid virtual-to-physical address translations configured with write permissions (PTE_W) in SV39 mode may incorrectly trigger a Store/AMO access fault during store instructions (sd). This occurs despite the presence of proper page table entries and valid memory access modes. The fault is reproducible when transitioning into virtual memory and attempting store operations in mapped kernel memory, indicating a potential flaw in the MMU, PMP, or memory access enforcement logic. This may cause unexpected kernel panics or denial of service in systems using BOOMv1.2.
Metrics
CVSS:3.1/AV:P/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N
Weakness Enumeration
Affected Software
| Vendor | Product | Versions |
|---|---|---|
| Boom-Core | Boomv | 1.2 |
References
- https://github.com/LuLuji04/POC-Boomv1.2Exploit, Third Party Advisory
Timeline
- Published
- Last Modified
- Status
- Analyzed
Frequently Asked Questions
What is CVE-2025-50897?
How severe is CVE-2025-50897?
How do I fix CVE-2025-50897?
How Strix Helps
- Uncovering a hidden BOLA in Appsmith's snapshot logicStrix autonomously discovered a BOLA/IDOR vulnerability in Appsmith's snapshot deletion path.
- Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
- PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
- AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.
Related CVEs from 2025
- CVE-2025-50879Rejected reason: DO NOT USE THIS CVE RECORD. ConsultIDs: non…
- CVE-2025-5088An authenticated Redis session could be used to obtain full …8.7
- CVE-2025-50881The `flow/admin/moniteur.php` script in Use It Flow administ…8.8
- CVE-2025-5089In a CVX cluster, an EOS switch connected to a CVX server is…7.1
- CVE-2025-50891The server-side backend for Adform Site Tracking before 2025…7.2
- CVE-2025-50892The eudskacs.sys driver version 20250328 shipped with EaseUs…7.8
- CVE-2025-5090CVX is not resilient to unexpected messages from a connected…7.1
- CVE-2025-50900An issue was discovered in getrebuild/rebuild 4.0.4. The aff…9.8
- CVE-2025-50901JeeWMS 771e4f5d0c01ffdeae1671be4cf102b73a3fe644 (2025-05-19)…9.8
- CVE-2025-50902Cross Site Request Forgery (CSRF) vulnerability in old-peanu…8.8
- CVE-2025-50904There is an authentication bypass vulnerability in WinterChe…9.8
- CVE-2025-5092Multiple plugins and/or themes for WordPress are vulnerable …6.4
Are you affected by CVE-2025-50897?
Run a free Strix scan to check your systems for this vulnerability.
Scan your code nowSource: NVD / NIST