HIGH🇵🇱 Wersja polska

CVE-2025-0647

CVSS 7.9v3.1pub. 2026-01-14upd. 2026-01-26

In certain Arm CPUs, a CPP RCTX instruction executed on one Processing Element (PE) may inhibit TLB invalidation when a TLBI is issued to the PE, either by the same PE or another PE in the shareability domain. In this case, the PE may retain stale TLB entries which should have been invalidated by the TLBI.

CVSS Vector
CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:C/C:H/I:H/A:N

  • Arm C1 Premium

    HW
    Arm
    wszystkie wersje

  • Arm C1 Premium Firmware

    OS
    Arm
    wszystkie wersje

  • Arm C1 Ultra

    HW
    Arm
    wszystkie wersje

  • Arm C1 Ultra Firmware

    OS
    Arm
    wszystkie wersje

  • Arm Cortex A710

    HW
    Arm
    wszystkie wersje

  • Arm Cortex A710 Firmware

    OS
    Arm
    wszystkie wersje

  • Arm Cortex X2

    HW
    Arm
    wszystkie wersje

  • Arm Cortex X2 Firmware

    OS
    Arm
    wszystkie wersje

  • Arm Cortex X3

    HW
    Arm
    wszystkie wersje

  • Arm Cortex X3 Firmware

    OS
    Arm
    wszystkie wersje

  • Arm Cortex X4

    HW
    Arm
    wszystkie wersje

  • Arm Cortex X4 Firmware

    OS
    Arm
    wszystkie wersje

  • Arm Cortex X925

    HW
    Arm
    wszystkie wersje

  • Arm Cortex X925 Firmware

    OS
    Arm
    wszystkie wersje

  • Arm Neoverse N2

    HW
    Arm
    wszystkie wersje

  • Arm Neoverse N2 Firmware

    OS
    Arm
    wszystkie wersje

  • Arm Neoverse V2

    HW
    Arm
    wszystkie wersje

  • Arm Neoverse V2 Firmware

    OS
    Arm
    wszystkie wersje

  • Arm Neoverse V3

    HW
    Arm
    wszystkie wersje

  • Arm Neoverse V3ae

    HW
    Arm
    wszystkie wersje

  • Arm Neoverse V3ae Firmware

    OS
    Arm
    wszystkie wersje

  • Arm Neoverse V3 Firmware

    OS
    Arm
    wszystkie wersje
🔵
CHECK WITH VENDOR
No clear patch data available. Check vendor references.
CWE
References

Related vulnerabilities

CVE-2024-5660CRITICAL9.8PL ✓ten sam produkt

Arm Cortex/Neoverse: obejście ochrony Stage-2 przez Hardware Page Aggregation

CVE-2024-7881MEDIUM5.1ten sam produkt

An unprivileged context can trigger a data memory-dependent prefetch engine to fetch the contents of a privile...

CVE-2022-23960MEDIUM5.6ten sam produkt

Certain Arm Cortex and Neoverse processors through 2022-03-08 do not properly restrict cache speculation, aka ...

CVE-2022-25368MEDIUM4.7ten sam produkt

Spectre BHB is a variant of Spectre-v2 in which malicious code uses the shared branch history (stored in the C...

CVE-2026-34877CRITICAL9.8PL ✓ten sam vendor

RCE przez deserializację kontekstu SSL w Mbed TLS