p PatchFirst

CVE-2025-0647

CVE-2025-0647

This page contains facts from public vulnerability sources. Check the original advisory before updating.

In certain Arm CPUs, a CPP RCTX instruction executed on one Processing Element (PE) may inhibit TLB invalidation when a TLBI is issued to the PE, either by the same PE or another PE in the shareability domain. In this case, the PE may retain stale TLB entries which should have been invalidated by the TLBI.

CVSS 7.9 · High · EPSS 0.2% · Fix available

Published
Updated

Stack: system

Affected products and versions

  • neoverse-n2

    Versions
    • 0: Affected

    No fix published

  • neoverse-v3ae

    Versions
    • 0: Affected

    No fix published

  • neoverse-v3

    Versions
    • 0: Affected

    No fix published

  • neoverse-v2

    Versions
    • 0: Affected

    No fix published

  • cortex-x925

    Versions
    • 0: Affected

    No fix published

  • cortex-x4

    Versions
    • 0: Affected

    No fix published

  • cortex-x3

    Versions
    • 0: Affected

    No fix published

  • cortex-x2

    Versions
    • 0: Affected

    No fix published

  • cortex-a710

    Versions
    • 0: Affected

    No fix published

  • c1-premium

    Versions
    • 0: Affected

    No fix published

  • c1-ultra

    Versions
    • 0: Affected

    No fix published

  • arm-trusted-firmware Debian:12

    Versions
    • 2.10.0+dfsg-1
    • 2.10.10+dfsg-1
    • 2.12.0+dfsg-1
    • 2.12.0+dfsg-2
    • 2.12.1+dfsg-1
    • 2.12.16+dfsg-1
    • 2.8.0+dfsg-1
    • 2.9.0+dfsg-1
    • 2.9.0+dfsg-2
    • 2.9.0+dfsg-3
    Affected ranges
    • ECOSYSTEM: (−∞, +∞)

    No fix published

  • arm-trusted-firmware Debian:13

    Versions
    • 2.12.1+dfsg-1
    • 2.12.16+dfsg-1
    Affected ranges
    • ECOSYSTEM: (−∞, +∞)

    No fix published

  • arm-trusted-firmware Debian:14

    Versions
    • 2.12.1+dfsg-1
    Affected ranges
    • ECOSYSTEM: < 2.12.16+dfsg-1

    Update to 2.12.16+dfsg-1

Original sources

Check your server →