GhostWrite and SLUBStick Vulnerabilities in T-Head C910 and C920 RISC-V CPUs Allow Full Device Takeover

Researchers have identified a significant vulnerability, named GhostWrite, affecting T-Head's XuanTie C910 and C920 RISC-V CPUs. This flaw permits unprivileged attackers to read and write any part of a device's memory and control peripheral devices, such as network cards. The vulnerability poses a serious risk, as it enables full device takeover, allowing unauthorized access to affected systems. Additionally, another vulnerability called SLUBStick has been reported, which involves arbitrary memory writes through practical software cross-cache attacks within the Linux kernel. The implications of these vulnerabilities underscore the need for heightened cybersecurity measures in devices utilizing these CPUs.