It's astonishing how few technical details are provided in this article (like the nature of the vulnerability, whether it affects RISC-V's design in general or only a specific implementation, and whether it is readily fixable).

I tried to find more details and found that slashdot user st0nerhat had found a more technical summary in Chinese, which you can see translated here:

https://mp-weixin-qq-com.translate.goog/s/ke8tBpJ7NpvUEAecov...