Issues

• [BUG] PMP check replaces an instruction guest-page fault with an instruction access fault

  Component:RTLStatus:NewType:Bug
  openhwfoundation/cva6#3597 · Filter by author qinkejiu opened on Sep 28, 2026

• [BUG] cva6_mmu: RV64-only fetch check creates a reversed part-select in cv32a6_imac_sv32

  Component:RTLStatus:NewType:Bug
  openhwfoundation/cva6#3594 · Filter by author xtofalex opened on Sep 26, 2026

• [BUG] <RV32-only Zkn instructions (aes32*, sha512*h/l/r) and the RV32 rev8 encoding still retire on RV64 after #3527>

  Component:RTLStatus:NewType:Bug
  openhwfoundation/cva6#3588 · Filter by author youzi27 opened on Sep 23, 2026

• [BUG] RASDepth=1 creates invalid slices in ras.sv

  Component:RTLnotCV32A65XStatus:NewType:Bug
  openhwfoundation/cva6#3587 · Filter by author KnightGOKU opened on Sep 23, 2026
  1

• [BUG] Three-way ICache can acknowledge a refill without installing it

  Type:Bug
  openhwfoundation/cva6#3584 · Filter by author jimmymtest opened on Sep 22, 2026

• [BUG] Zcmp stack instructions fail in some situations

  Component:RTLStatus:NewType:Bug
  openhwfoundation/cva6#3582 · Filter by author fpetrot opened on Sep 20, 2026
  7

• [BUG] WT DCache replacement index is not range-safe for three-way associativity

  Component:RTLStatus:In ProgressType:Bug
  openhwfoundation/cva6#3580 · Filter by author KnightGOKU opened on Sep 20, 2026
  2

  

• [BUG] SharedTlbDepth=6` can generate out-of-range Shared TLB indices

  Component:RTLnotCV32A65XPARAM:MMUStatus:In ProgressType:Bug
  openhwfoundation/cva6#3579 · Filter by author KnightGOKU opened on Sep 19, 2026
  

• [Formal finding CVA6-RTL-002] Nine shipped configurations implement 8 PMP entries, a count the architecture does not permit

  Component:RTLStatus:NewType:Question
  openhwfoundation/cva6#3575 · Filter by author StandardAsh opened on Sep 18, 2026

• [Formal finding CVA6-RTL-001] medelegh is not implemented in the XLEN=32 configurations that enable S-mode, so the upper half of the 64-bit medeleg is unreachable and a read raises an illegal-instruction exception

  Component:RTLStatus:NewType:Question
  openhwfoundation/cva6#3574 · Filter by author StandardAsh opened on Sep 18, 2026

• [BUG] Instruction fetch bypasses PTE X permission when the UseSharedTlb is enabled

  Component:RTLnotCV32A65XPARAM:MMUStatus:NewType:Bug
  openhwfoundation/cva6#3573 · Filter by author YangKefan-rk opened on Sep 17, 2026

• [BUG] Incorrect address translation for G-stage NAPOT.

  Component:RTLnotCV32A65XPARAM:MMUStatus:NewType:Bug
  openhwfoundation/cva6#3569 · Filter by author YangKefan-rk opened on Sep 16, 2026

• [BUG] instr_queue changes instruction guest-page faults to page faults when RVC is disabled

  Component:RTLnotCV32A65XStatus:In ProgressType:Bug
  openhwfoundation/cva6#3568 · Filter by author YangKefan-rk opened on Sep 16, 2026
  2

  

• [BUG] Data Integrity violation: Read returns old refill data

  Component:RTLnotCV32A65XStatus:NewType:Bug
  Bug

  openhwfoundation/cva6#3553 · Filter by author sebbo0102 opened on Sep 11, 2026
  7

• [BUG] frontend drops the RAS call-push / return-pop when a call or return in the upper fetch slot follows a not-taken branch in the lower slot

  Component:RTLCV32A65XGood First IssueStatus:In ProgressType:Bug
  openhwfoundation/cva6#3545 · Filter by author Misbahud-Din opened on Sep 8, 2026
  2

  

• [BUG] Vendored axi_riscv_lrsc: write bursts invalidate reservations only at the burst base address; SC succeeds on burst-overwritten data (+ LR can overtake in-flight writes)

  Component:RTLStatus:NewType:Bug
  openhwfoundation/cva6#3532 · Filter by author john-kearney opened on Sep 4, 2026
  1

• [BUG] <- JVT mismatch in Zcmt tests - master candidate>

  Component:RTLmaster_candidateStatus:NewType:Bug
  openhwfoundation/cva6#3521 · Filter by author AngelaGonzalezMarino opened on Sep 2, 2026

• [BUG] <- Hello world in 64 bit OBI configurations gives an error - master candidate>

  Component:RTLmaster_candidateStatus:NewType:Bug
  openhwfoundation/cva6#3520 · Filter by author AngelaGonzalezMarino opened on Sep 2, 2026
  4

• [BUG] Zcmt JVT table-entry fetch is a raw D-cache data read: no execute-permission/PMA check and no way to report a fetch fault

  Component:RTLStatus:NewType:Bug
  openhwfoundation/cva6#3516 · Filter by author oChunCai opened on Sep 1, 2026

• [BUG] Double Grant for single request in cache_ctrl.sv

  Component:RTLStatus:In ProgressType:Bug
  openhwfoundation/cva6#3502 · Filter by author sebbo0102 opened on Aug 25, 2026
  3

  

• [BUG] abstractcs.cmderr != 0 still starts a new abstract command

  Component:RTLStatus:NewType:Bug
  openhwfoundation/cva6#3498 · Filter by author oChunCai opened on Aug 23, 2026

• [BUG] csr_regfile: mtinst is written with a transformed instruction on virtual-instruction traps and on interrupts, where it must be zero

  Component:RTLStatus:In ProgressType:Bug
  openhwfoundation/cva6#3496 · Filter by author ido-accelerato opened on Aug 23, 2026
  1

  

• [BUG] decoder: reserved same-format FP conversion encodings are accepted (decode gap; breaks ISS co-simulation)

  Component:RTLnotCV32A65XPARAM:FPUStatus:In ProgressType:Bug
  openhwfoundation/cva6#3494 · Filter by author ido-accelerato opened on Aug 23, 2026
  1

  

• Boot from SRAM

  Type:Question
  openhwfoundation/cva6#3477 · Filter by author rakeshnakkilla opened on Aug 17, 2026

• [BUG] An instruction fetch walk during an HLV installs a TLB entry with an empty VS stage PTE

  Component:RTLnotCV32A65XPARAM:MMUStatus:NewType:Bug
  openhwfoundation/cva6#3475 · Filter by author PorterLu opened on Aug 15, 2026