You signed in with another tab or window. Reload to refresh your session.You signed out in another tab or window. Reload to refresh your session.You switched accounts on another tab or window. Reload to refresh your session.Dismiss alert
Copy file name to clipboardExpand all lines: content/_index.md
+1-1Lines changed: 1 addition & 1 deletion
Original file line number
Diff line number
Diff line change
@@ -8,7 +8,7 @@ header_menu: true
8
8
date: 07-10-2023
9
9
---
10
10
11
-
The GhostWrite vulnerability affects the T-Head XuanTie C910 RISC-V CPU.
11
+
The GhostWrite vulnerability affects the T-Head XuanTie C910 and C920 RISC-V CPUs.
12
12
This vulnerability allows unprivileged attackers, even those with limited access, to read and write any part of the computer's memory and to control peripheral devices like network cards.
13
13
GhostWrite renders the CPU's security features ineffective and cannot be fixed without disabling around half of the CPU's functionality.
Copy file name to clipboardExpand all lines: content/homepage/faq.md
+4-4Lines changed: 4 additions & 4 deletions
Original file line number
Diff line number
Diff line change
@@ -8,11 +8,11 @@ slug: "faq"
8
8
9
9
{{< accordion title="Am I affected by this vulnerability?" open=true >}}
10
10
Most likely, you are not affected directly.
11
-
Only individuals that use vulnerable RISC-V hardware, such as C910-based single-board computers (SBCs), cloud deployments, or other multi-party computing solutions are directly affected.
11
+
Only individuals that use vulnerable RISC-V hardware, such as C910-based or C920-based single-board computers (SBCs), cloud deployments, or other multi-party computing solutions are directly affected.
12
12
Even though you might not be affected directly, the chance is high that you might already or in the future interact with vulnerable devices.
13
13
{{< /accordion >}}
14
14
15
-
{{< accordion title="How do I know if my device uses the T-Head XuanTie C910 CPU?" >}}
15
+
{{< accordion title="How do I know if my device uses the T-Head XuanTie C910 or C920 CPU?" >}}
16
16
Most consumer devices list their CPU specifications in their technical details or documentation.
17
17
You can check the manufacturer's website, user manual, or device settings for this information.
18
18
{{< /accordion >}}
@@ -63,12 +63,12 @@ As of now, there are no specific tools or methods to detect if GhostWrite is bei
63
63
64
64
{{< accordion title="Does this mean that RISC-V is bad?" >}}
65
65
GhostWrite is not a problem with the RISC-V ISA.
66
-
Only the T-Head XuanTie C910 CPU, an implementation of RISC-V, is vulnerable to GhostWrite due to a bug in it's design.
66
+
Only the T-Head XuanTie C910 and C920 CPUs, implementations of RISC-V, are vulnerable to GhostWrite due to a bug in their design.
67
67
{{< /accordion >}}
68
68
69
69
{{< accordion title="Are there any alternative RISC-V CPUs that do not have this vulnerability?" >}}
70
70
Yes, many other RISC-V CPUs are not affected by GhostWrite.
71
-
The vulnerability is specific to the T-Head XuanTie C910 CPU.
71
+
The vulnerability is specific to the T-Head XuanTie C910 and C920 CPUs.
72
72
{{< /accordion >}}
73
73
74
74
{{< accordion title="Can I use the logo?" last=true >}}
Copy file name to clipboardExpand all lines: content/homepage/implications.md
+2-1Lines changed: 2 additions & 1 deletion
Original file line number
Diff line number
Diff line change
@@ -6,12 +6,13 @@ weight: 5
6
6
slug: "implications"
7
7
---
8
8
9
-
To the best of our knowledge, only the T-Head XuanTie C910 CPU in the TH1520 SoC is affected by GhostWrite.
9
+
To the best of our knowledge, only the T-Head XuanTie C910 CPU in the TH1520 SoC and the T-Head XuanTie C920 CPU in the SOPHON SG2042 are affected by GhostWrite.
10
10
Still, this vulnerability impacts a wide range of devices, including personal computers, laptops, containers, and virtual machines in cloud servers.
11
11
Therefore, any customers or vendors using machines with these processors are at risk.
12
12
13
13
Vulnerable devices include:
14
14
-[Scaleway Elastic Metal RV1](https://labs.scaleway.com/en/em-rv1/), bare-metal C910 cloud instances
0 commit comments