diff --git a/src/exercises/cheri-tags/README.md b/src/exercises/cheri-tags/README.md
index 5307012..af9c7d7 100644
--- a/src/exercises/cheri-tags/README.md
+++ b/src/exercises/cheri-tags/README.md
@@ -32,7 +32,7 @@ things!
    What stands out?
 
 5. Given that `q` and `r` appear to have identical byte representation in
-   memory, why does the CHERI version crash when dereferencing `q`?
+   memory, why does the CHERI version crash when dereferencing `r`?
 
 ## Source
 
diff --git a/src/exercises/cheri-tags/answers.md b/src/exercises/cheri-tags/answers.md
index 062840f..8198b0d 100644
--- a/src/exercises/cheri-tags/answers.md
+++ b/src/exercises/cheri-tags/answers.md
@@ -87,7 +87,7 @@
    combination of the old capability (in `ca0`) and the new address (in `a1`)
    remains *representable*.
 
-5. While the in-memory, byte representation of `q` and `r` are identical, `q`
+5. While the in-memory, byte representation of `q` and `r` are identical, `r`
    has been manipulated as *bytes* rather than as a *capability* and so has had
    its tag zeroed.  (Specifically, the `csb zero, 32(csp)` instruction cleared
    the tag associated with the 16-byte granule pointed to by `32(csp)`; the