CVE-2025-10263 — Arm / C1-Ultra

Description (CNA)

Arm C1-Ultra, C1-Premium, Neoverse V3 & V3AE, Neoverse V2, Neoverse V1, Neoverse-N2, Neoverse-N1, Cortex-X925, Cortex-X4, Cortex-X3, Cortex-X2, Cortex-X1 & X1C, Cortex-A710, Cortex-A78, A78AE & A78C, Cortex-A77, Cortex-A76 & A76A may allow writes to resources owned by a higher exception level.

Affected (CNA)

Vendor / product	Versions
Arm / C1-Ultra	affected 0
Arm / C1-Premium	affected 0
Arm / Neoverse V3	affected 0
Arm / Neoverse V3AE	affected 0
Arm / Neoverse V1	affected 0
Arm / Neoverse N2	affected 0
Arm / Neoverse N1	affected 0
Arm / Cortex-X925	affected 0
Arm / Cortex-X4	affected 0
Arm / Cortex-X3	affected 0
Arm / Cortex-X2	affected 0
Arm / Cortex-X1	affected 0
Arm / Cortex-X1C	affected 0
Arm / Cortex-A710	affected 0
Arm / Cortex-A78	affected 0
Arm / Cortex-A78AE	affected 0
Arm / Cortex-A78C	affected 0
Arm / Cortex-A77	affected 0
Arm / Cortex-A76	affected 0
Arm / Cortex-A76AE	affected 0

CWE

CWE-362

References

https://developer.arm.com/documentation/112137

ADP enrichment

CVE

No English description supplied.

CISA-ADP

No English description supplied.

No references supplied.

redhat-SADP

A flaw was found in the Linux kernel on ARM processors. A race condition in Translation Lookaside Buffer Invalidation (TLBI) operations during memory permission changes allows a local attacker to write to memory resources owned by higher privilege levels. This could allow an unprivileged local attacker to gain kernel privileges or a guest VM to escape to the hypervisor, resulting in complete system compromise.