CVE-2026-29646: Nemu Rvh Vmode Sie Sip Incorrect Dispatchcve-2026-29646-nemu-rvh-vmode-sie-sip-incorrect-dispatch
VS-mode (cpu.v == 1) access to the supervisor interrupt CSRs sie/sip is being dispatched through vmode_get_sie / vmode_set_sie / vmode_get_sip / vmode_set_sip. These helpers do not apply the RISC-V H-extension delegation masking (get_hideleg() & (mideleg | MIDELEG_FORCED_MASK), hvien) and write directly to machine-level mie / hvip, which violates the privile