Description
The Versal™ AI Edge Series Gen 2 Peripheral Protection Unit (XPPU) for the inter-processor interrupt (IPI) buffers does not block unauthorized access as expected. This allows processors in the SoC with any IPI channel access the ability to both read and write to the entire IPI buffer register space as well as the IPI no-buffer register control space.
Published: 2026-11-12
Score: 5.9 Medium
EPSS: n/a
KEV: No
Impact: n/a
Action: n/a
AI Analysis

Analysis and contextual insights are available on OpenCVE Cloud.

Remediation

No vendor fix or workaround currently provided.

Additional remediation guidance may be available on OpenCVE Cloud.

Tracking

Sign in to view the affected projects.

Advisories

No advisories yet.

History

Fri, 13 Nov 2026 01:15:00 +0000

Type Values Removed Values Added
Title Unauthorized Access to Inter‑Processor Interrupt Buffers in AMD Versal SoCs

Thu, 12 Nov 2026 19:45:00 +0000

Type Values Removed Values Added
Description The Versal™ AI Edge Series Gen 2 Peripheral Protection Unit (XPPU) for the inter-processor interrupt (IPI) buffers does not block unauthorized access as expected. This allows processors in the SoC with any IPI channel access the ability to both read and write to the entire IPI buffer register space as well as the IPI no-buffer register control space.
Weaknesses CWE-1220
References
Metrics cvssV4_0

{'score': 5.9, 'vector': 'CVSS:4.0/AV:L/AC:L/AT:P/PR:L/UI:A/VC:L/VI:L/VA:H/SC:L/SI:L/SA:H'}

Subscriptions

No data.

cve-icon MITRE

Status: PUBLISHED

Assigner: AMD

Published:

Updated: 2026-11-13T00:15:15.852Z

Reserved: 2025-12-06T13:53:59.710Z

Link: CVE-2026-0455

cve-icon Vulnrichment

No data.

cve-icon NVD

Status : Awaiting Analysis

Published: 2026-11-12T20:18:14.237

Modified: 2026-11-13T02:18:49.017

Link: CVE-2026-0455

cve-icon Redhat

No data.

cve-icon OpenCVE Enrichment

Updated: 2026-11-13T01:00:10Z

Weaknesses
  • CWE-1220

    Insufficient Granularity of Access Control