CVE-2025-56301

An issue was discovered in Chipsalliance Rocket-Chip commit f517abbf41abb65cea37421d3559f9739efd00a9 (2025-01-29) allowing attackers to corrupt exception handling and privilege state transitions via a flawed interaction between exception handling and MRET return mechanisms in the CSR logic when an exception is triggered during MRET execution. The Control and Status Register (CSR) logic has a flawed interaction between exception handling and exception return (MRET) mechanisms which can cause faulty trap behavior. When the MRET instruction is executed in machine mode without being in an exception state, an Instruction Access Fault may be triggered. This results in both the exception handling logic and the exception return logic activating simultaneously, leading to conflicting updates to the control and status registers.

• CWE-1281

• https://github.com/chipsalliance/rocket-chipProduct
• https://github.com/chipsalliance/rocket-chip/blob/f517abbf41abb65cea37421d3559f9739efd00a9/src/main/scala/rocket/CSR.scalaProduct
• https://github.com/chipsalliance/rocket-chip/blob/master/src/main/scala/rocket/CSR.scalaProduct
• https://github.com/heyfenny/Vulnerability_disclosure/blob/main/RISCV/Rocket-chip/CVE-2025-56301/details.mdExploit, Third Party Advisory
• https://lf-riscv.atlassian.net/wiki/spaces/HOME/pages/16154769/RISC-V+Technical+Specifications#ISA-SpecificationsProduct

Published

Sep 30, 2025

Last Modified

Jun 17, 2026

Status

Analyzed

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2025-56280code-projects Food Ordering Review System 1.0 is vulnerable …5.4
• CVE-2025-56289code-projects Document Management System 1.0 has a Cross Sit…5.4
• CVE-2025-5629A vulnerability, which was classified as critical, was found…9.8
• CVE-2025-56293code-projects Human Resource Integrated System 1.0 is vulner…5.4
• CVE-2025-56295code-projects Computer Laboratory System 1.0 has a file uplo…7.3
• CVE-2025-5630A vulnerability has been found in D-Link DIR-816 1.10CNB05 a…9.8
• CVE-2025-56304Cross-site scripting (XSS) vulnerability in YzmCMS thru 7.3 …6.1
• CVE-2025-5631A vulnerability was found in code-projects/anirbandutta9 Con…9.8
• CVE-2025-56311In Shenzhen C-Data Technology Co. FD602GW-DX-R410 (firmware …6.5
• CVE-2025-56313A Reflected Cross-Site Scripting (XSS) vulnerability was dis…6.1
• CVE-2025-56316A SQL injection vulnerability in the content_title parameter…9.8
• CVE-2025-5632A vulnerability was found in code-projects/anirbandutta9 Con…8.8