{"id":"CVE-2026-0455","kind":"vulnerability","aliases":["CVE-2026-0455"],"related":[],"title":"Xilinx Versal AI Edge Gen 2: IPI buffer protection lets any processor access registers","description":"The Versal™ AI Edge Series Gen 2 Peripheral Protection Unit (XPPU) for the inter-processor interrupt (IPI) buffers does not block unauthorized access as expected. This allows processors in the SoC with any IPI channel access the ability to both read and write to the entire IPI buffer register space as well as the IPI no-buffer register control space.","summary":"The Peripheral Protection Unit on the Versal AI Edge Series Gen 2 system-on-chip fails to block unauthorized access to inter-processor interrupt buffer registers. Any processor on the chip with an IPI channel can read and write the entire IPI buffer and no-buffer control register space.","severity":"medium","cvss":5.9,"epss":null,"exploited":false,"exploited_at":null,"products":[],"ecosystems":[],"tags":["amd","embedded","fpga","infrastructure","soc","versal"],"not_affected_if":["single-processor-domain"],"how_to_check":null,"fix":null,"status":"open","published_at":"2026-11-12T20:18:14+00:00","first_seen_at":"2026-11-12T20:40:22+00:00","triaged_at":"2026-11-12T20:42:22+00:00","updated_at":"2026-11-12T20:42:22+00:00","category":"infrastructure","confidence":0.6,"triage":{"at":"2026-11-12T20:42:22Z","model":"claude-haiku-5-5","output":{"fix":"unknown","reach":"local","title":"Xilinx Versal AI Edge Gen 2: IPI buffer protection lets any processor access registers","impact":"medium","summary":"The Peripheral Protection Unit on the Versal AI Edge Series Gen 2 system-on-chip fails to block unauthorized access to inter-processor interrupt buffer registers. Any processor on the chip with an IPI channel can read and write the entire IPI buffer and no-buffer control register space.","audience":"businesses","category":"infrastructure","nicknames":[],"who_cares":["versal","amd","embedded","fpga","soc"],"confidence":0.6,"fix_status":"unknown","needs_auth":"yes","worst_case":"Code on one processor tampers with another processor's interrupt registers","analyst_note":"Check the AMD security bulletin for affected versions and the fix; the NVD entry alone gives no product ranges or patch.","how_to_check":"unknown","plain_action":"","product_name":"","needs_analyst":true,"not_affected_if":["single-processor-domain"],"who_is_affected":"Affects Versal AI Edge Series Gen 2 system-on-chip designs where multiple processors share the chip and rely on XPPU to isolate IPI registers. Teams running standard boards without custom firmware on separate processor domains are unlikely to be exposed, but the sources do not say which configurations are affected.","user_interaction":"no","product_ecosystem":"","needs_special_setup":"unknown","severity_if_unknown":"unknown"},"cost_usd":0.000717,"input_tokens":4594,"output_tokens":516,"severity_before":"medium"},"analyst_status":null,"analyst_note":null,"search":"'-0455':17A,20A '-2026':16A,19A '2':6A,38B,85C 'abil':117C 'access':13A,47B,102C,115C 'ai':3A,34B,81C 'allow':106C 'amd':21B 'block':45B,100C 'buffer':8A,53B,71B,75B,97C,127C,137C 'channel':63B,114C 'chip':42B,59B 'control':76B,139C 'cve':15A,18A 'edg':4A,35B,82C 'embed':22B 'entir':69B,125C 'expect':104C 'fail':43B 'fpga':23B 'gen':5A,37B,84C 'infrastructur':24B 'inter':50B,93C 'inter-processor':49B,92C 'interrupt':52B,95C 'ipi':7A,62B,70B,96C,113C,126C,134C 'let':10A 'no-buff':73B,135C 'peripher':28B,86C 'processor':12A,51B,56B,94C,107C 'protect':9A,29B,87C 'read':65B,120C 'regist':14A,54B,77B,128C,138C 'seri':36B,83C 'soc':25B,110C 'space':78B,129C,140C 'system':40B 'system-on-chip':39B 'unauthor':46B,101C 'unit':30B,88C 'versal':2A,26B,33B,80C 'well':131C 'write':67B,122C 'xilinx':1A 'xppu':89C","nicknames":[],"mitigations":[],"who_affected":"Affects Versal AI Edge Series Gen 2 system-on-chip designs where multiple processors share the chip and rely on XPPU to isolate IPI registers. Teams running standard boards without custom firmware on separate processor domains are unlikely to be exposed, but the sources do not say which configurations are affected.","tier":"C","verified":{},"analyst_revisit_at":null,"fix_status":"none","audience":"businesses","plain_action":null,"pkeys":[],"ptokens":[],"labels":["amd","embedded","fpga","infrastructure","medium","soc","versal"],"campaign_type":null,"search_a":"'-0455':17A,20A '-2026':16A,19A '2':6A 'access':13A 'ai':3A 'buffer':8A 'cve':15A,18A 'edg':4A 'gen':5A 'ipi':7A 'let':10A 'processor':12A 'protect':9A 'regist':14A 'versal':2A 'xilinx':1A","search_b":"'2':38B 'access':47B 'ai':34B 'amd':21B 'block':45B 'buffer':53B,71B,75B 'channel':63B 'chip':42B,59B 'control':76B 'edg':35B 'embed':22B 'entir':69B 'fail':43B 'fpga':23B 'gen':37B 'infrastructur':24B 'inter':50B 'inter-processor':49B 'interrupt':52B 'ipi':62B,70B 'no-buff':73B 'peripher':28B 'processor':51B,56B 'protect':29B 'read':65B 'regist':54B,77B 'seri':36B 'soc':25B 'space':78B 'system':40B 'system-on-chip':39B 'unauthor':46B 'unit':30B 'versal':26B,33B 'write':67B","search_c":"'2':85C 'abil':117C 'access':102C,115C 'ai':81C 'allow':106C 'block':100C 'buffer':97C,127C,137C 'channel':114C 'control':139C 'edg':82C 'entir':125C 'expect':104C 'gen':84C 'inter':93C 'inter-processor':92C 'interrupt':95C 'ipi':96C,113C,126C,134C 'no-buff':135C 'peripher':86C 'processor':94C,107C 'protect':87C 'read':120C 'regist':128C,138C 'seri':83C 'soc':110C 'space':129C,140C 'unauthor':101C 'unit':88C 'versal':80C 'well':131C 'write':122C 'xppu':89C","cause_entry":null,"cause_path":null,"disclosures_checked_at":null,"first_public_at":"2026-11-12T20:18:14+00:00","kev":null,"cvss_vector":"CVSS:4.0/AV:L/AC:L/AT:P/PR:L/UI:A/VC:L/VI:L/VA:H/SC:L/SI:L/SA:H/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X","cvss_by":"psirt@amd.com","poc_count":0,"sources":[{"source":"nvd","external_id":"CVE-2026-0455","url":"https://nvd.nist.gov/vuln/detail/CVE-2026-0455","severity":null,"published_at":"2026-11-12T20:18:14+00:00","modified_at":"2026-11-12T20:18:14+00:00","first_seen_at":"2026-11-12T20:40:22+00:00","fetched_at":"2026-11-12T20:40:22+00:00","note":null}],"documents":[],"disclosures":[],"exploit_sources":[],"notice":"Free to read, with fair use of about 60 pages a minute. For higher limits or API access: sales@infrastack.ai"}