Issues

• [BUG] CV-X-IF offload squashed by a pipeline flush is never cancelled and stale write-back corrupts an unrelated instruction

  Type:Bug
  openhwfoundation/cva6#3613 · Filter by author zxz2004626 opened on Oct 7, 2026

• Async Reset creates untestable ffs during Design for Testability insertion.

  Component:Tool-and-buildType:Question
  openhwfoundation/cva6#3609 · Filter by author franout opened on Oct 5, 2026
  6

• [BUG] An AMO to the boot ROM, the CLINT or the Debug Module never completes: the hart hangs instead of raising a store/AMO access fault

  Component:RTLPARAM:AMOStatus:In ProgressType:Bug
  openhwfoundation/cva6#3608 · Filter by author youzi27 opened on Oct 5, 2026
  1

  

• [BUG] An AMO through a leaf PTE with D = 0 raises a store/AMO access fault (7) instead of a store/AMO page fault (15)

  Component:RTLPARAM:AMOStatus:NewType:Bug
  openhwfoundation/cva6#3607 · Filter by author youzi27 opened on Oct 5, 2026

• [BUG] LR is treated as a store during PMP checks, causing valid R-only accesses to fault

  Component:RTLPARAM:AMOStatus:NewType:Bug
  openhwfoundation/cva6#3606 · Filter by author 90ICEDA opened on Oct 3, 2026
  6

• [Enhancement] Support for the 'Sstc' supervisor-mode timer interrupts extension

  Component:RTLStatus:NewType:Enhancement
  openhwfoundation/cva6#3605 · Filter by author midnightveil opened on Oct 2, 2026

• [BUG] PMP check replaces an instruction guest-page fault with an instruction access fault

  Component:RTLStatus:NewType:Bug
  openhwfoundation/cva6#3597 · Filter by author qinkejiu opened on Sep 28, 2026

• [BUG] cva6_mmu: RV64-only fetch check creates a reversed part-select in cv32a6_imac_sv32

  Component:RTLStatus:NewType:Bug
  openhwfoundation/cva6#3594 · Filter by author xtofalex opened on Sep 26, 2026

• [BUG] <RV32-only Zkn instructions (aes32*, sha512*h/l/r) and the RV32 rev8 encoding still retire on RV64 after #3527>

  Component:RTLStatus:NewType:Bug
  openhwfoundation/cva6#3588 · Filter by author youzi27 opened on Sep 23, 2026

• [BUG] RASDepth=1 creates invalid slices in ras.sv

  Component:RTLnotCV32A65XStatus:NewType:Bug
  openhwfoundation/cva6#3587 · Filter by author KnightGOKU opened on Sep 23, 2026
  1

• [BUG] Three-way ICache can acknowledge a refill without installing it

  Type:Bug
  openhwfoundation/cva6#3584 · Filter by author jimmymtest opened on Sep 22, 2026

• [BUG] Zcmp stack instructions fail in some situations

  Component:RTLStatus:NewType:Bug
  openhwfoundation/cva6#3582 · Filter by author fpetrot opened on Sep 20, 2026
  7

• [BUG] WT DCache replacement index is not range-safe for three-way associativity

  Component:RTLStatus:In ProgressType:Bug
  openhwfoundation/cva6#3580 · Filter by author KnightGOKU opened on Sep 20, 2026
  2

  

• [BUG] SharedTlbDepth=6` can generate out-of-range Shared TLB indices

  Component:RTLnotCV32A65XPARAM:MMUStatus:In ProgressType:Bug
  openhwfoundation/cva6#3579 · Filter by author KnightGOKU opened on Sep 19, 2026
  

• [Formal finding CVA6-RTL-002] Nine shipped configurations implement 8 PMP entries, a count the architecture does not permit

  Component:RTLStatus:NewType:Question
  openhwfoundation/cva6#3575 · Filter by author StandardAsh opened on Sep 18, 2026

• [Formal finding CVA6-RTL-001] medelegh is not implemented in the XLEN=32 configurations that enable S-mode, so the upper half of the 64-bit medeleg is unreachable and a read raises an illegal-instruction exception

  Component:RTLStatus:NewType:Question
  openhwfoundation/cva6#3574 · Filter by author StandardAsh opened on Sep 18, 2026

• [BUG] Instruction fetch bypasses PTE X permission when the UseSharedTlb is enabled

  Component:RTLnotCV32A65XPARAM:MMUStatus:NewType:Bug
  openhwfoundation/cva6#3573 · Filter by author YangKefan-rk opened on Sep 17, 2026

• [BUG] Incorrect address translation for G-stage NAPOT.

  Component:RTLnotCV32A65XPARAM:MMUStatus:NewType:Bug
  openhwfoundation/cva6#3569 · Filter by author YangKefan-rk opened on Sep 16, 2026

• [BUG] instr_queue changes instruction guest-page faults to page faults when RVC is disabled

  Component:RTLnotCV32A65XStatus:In ProgressType:Bug
  openhwfoundation/cva6#3568 · Filter by author YangKefan-rk opened on Sep 16, 2026
  2

  

• [BUG] Data Integrity violation: Read returns old refill data

  Component:RTLnotCV32A65XStatus:NewType:Bug
  Bug

  openhwfoundation/cva6#3553 · Filter by author sebbo0102 opened on Sep 11, 2026
  7

• [BUG] frontend drops the RAS call-push / return-pop when a call or return in the upper fetch slot follows a not-taken branch in the lower slot

  Component:RTLCV32A65XGood First IssueStatus:In ProgressType:Bug
  openhwfoundation/cva6#3545 · Filter by author Misbahud-Din opened on Sep 8, 2026
  2

  

• [BUG] Vendored axi_riscv_lrsc: write bursts invalidate reservations only at the burst base address; SC succeeds on burst-overwritten data (+ LR can overtake in-flight writes)

  Component:RTLStatus:NewType:Bug
  openhwfoundation/cva6#3532 · Filter by author john-kearney opened on Sep 4, 2026
  1

• [BUG] <- JVT mismatch in Zcmt tests - master candidate>

  Component:RTLmaster_candidateStatus:NewType:Bug
  openhwfoundation/cva6#3521 · Filter by author AngelaGonzalezMarino opened on Sep 2, 2026

• [BUG] <- Hello world in 64 bit OBI configurations gives an error - master candidate>

  Component:RTLmaster_candidateStatus:NewType:Bug
  openhwfoundation/cva6#3520 · Filter by author AngelaGonzalezMarino opened on Sep 2, 2026
  4

• [BUG] Zcmt JVT table-entry fetch is a raw D-cache data read: no execute-permission/PMA check and no way to report a fetch fault

  Component:RTLStatus:NewType:Bug
  openhwfoundation/cva6#3516 · Filter by author oChunCai opened on Sep 1, 2026