Arm CPU Security Advisory: Privilege Escalation Vulnerability (CVE-2025-10263)

Vulnerability Overview CVE ID: CVE-2025-10263 Description: An issue has been identified in certain Arm-based CPUs that may allow writes to resources owned by higher exception levels, potentially leading to privilege escalation. Impact Scope Affected CPUs: - Arm C1-Ultra, C1-Premium - Neoverse V8 & V3AE, Neoverse V2, Neoverse V1, Neoverse N2, Neoverse N1 - Cortex-X925, Cortex-X4, Cortex-X3, Cortex-X2, Cortex-X1 & X1C, Cortex-A710, Cortex-A78, A78AE & A78C, Cortex-A77, Cortex-A76 & A76AE Remediation Temporary Workaround: Any software performing TLB invalidation while applying Stage 1 or Stage 1 & 2 permissions must execute additional TLBI and DSB instructions. The specific sequence required can be found in the errata documentation for each affected CPU. Long-term Solution: Arm has submitted patches to the Linux kernel and Trusted Firmware-A to mitigate this issue on affected CPUs. Version History Version: 1.0 Date: June 9, 2026 Description: Initial release Legal Disclaimer This information is subject to the Arm Security Legal Notice and Disclaimer. Additional Information Article ID: 112137 Document Type: Security Advisory Last Updated: June 9, 2026 Credits This issue was identified by Arm. Feedback A yellow “Feedback” button is available on the right side of the page for providing feedback. Navigation The top of the page includes a navigation bar with options such as “Developer”, “Develop”, “Blogs”, “Community”, “CPU & Hardware”, “Support”, and “Documentation”. Footer The footer contains a legal disclaimer stating that this information is subject to the Arm Security Legal Notice and Disclaimer. Code Blocks No POC code or exploit code is included on the page.

Goal Reached Thanks to every supporter — we hit 100%!

Arm CPU Security Advisory: Privilege Escalation Vulnerability (CVE-2025-10263)