CVE-2022-26296: Boom-Core Risvc-Boom

Medium severity, CVSS 5.5. EPSS: 0.4% chance of exploitation in the next 30 days.

BOOM: The Berkeley Out-of-Order RISC-V Processor commit d77c2c3 was discovered to allow unauthorized disclosure of information to an attacker with local user access via a side-channel analysis.

Affected products

• Boom-Core Risvc-Boom: before 3.0.0 (fixed in 3.0.0)

Published 2022-03-28. Last modified 2026-06-17.