CVE-2025-10263
CVE-2025-10263
This page contains facts from public vulnerability sources. Check the original advisory before updating.
This page shows selected source facts. See the linked advisories for the complete description and affected versions.
Arm C1-Ultra, C1-Premium, Neoverse V3 & V3AE, Neoverse V2, Neoverse V1, Neoverse-N2, Neoverse-N1, Cortex-X925, Cortex-X4, Cortex-X3, Cortex-X2, Cortex-X1 & X1C, Cortex-A710, Cortex-A78, A78AE & A78C, Cortex-A77, Cortex-A76 & A76A may allow writes to resources owned by a higher exception level.
CVSS 9.1 · Critical · EPSS 0.5% · Fix available
- Published
- Updated
Stack: system
Affected products and versions
c1-ultra
- Versions
- 0: Affected
No fix published
c1-premium
- Versions
- 0: Affected
No fix published
neoverse v3
- Versions
- 0: Affected
No fix published
neoverse v3ae
- Versions
- 0: Affected
No fix published
neoverse v1
- Versions
- 0: Affected
No fix published
neoverse n2
- Versions
- 0: Affected
No fix published
neoverse n1
- Versions
- 0: Affected
No fix published
cortex-x925
- Versions
- 0: Affected
No fix published
cortex-x4
- Versions
- 0: Affected
No fix published
cortex-x3
- Versions
- 0: Affected
No fix published
cortex-x2
- Versions
- 0: Affected
No fix published
cortex-x1
- Versions
- 0: Affected
No fix published
cortex-x1c
- Versions
- 0: Affected
No fix published
cortex-a710
- Versions
- 0: Affected
No fix published
cortex-a78
- Versions
- 0: Affected
No fix published
cortex-a78ae
- Versions
- 0: Affected
No fix published
cortex-a78c
- Versions
- 0: Affected
No fix published
cortex-a77
- Versions
- 0: Affected
No fix published
cortex-a76
- Versions
- 0: Affected
No fix published
cortex-a76ae
- Versions
- 0: Affected
No fix published
arm-trusted-firmware Debian:12
- Versions
- 2.10.0+dfsg-1
- 2.10.10+dfsg-1
- 2.12.0+dfsg-1
- 2.12.0+dfsg-2
- 2.12.1+dfsg-1
- 2.12.16+dfsg-1
- 2.8.0+dfsg-1
- 2.9.0+dfsg-1
- 2.9.0+dfsg-2
- 2.9.0+dfsg-3
- Affected ranges
- ECOSYSTEM: (−∞, +∞)
No fix published
arm-trusted-firmware Debian:13
- Versions
- 2.12.1+dfsg-1
- 2.12.16+dfsg-1
- Affected ranges
- ECOSYSTEM: (−∞, +∞)
No fix published
arm-trusted-firmware Debian:14
- Versions
- 2.12.1+dfsg-1
- Affected ranges
- ECOSYSTEM: < 2.12.16+dfsg-1
Update to 2.12.16+dfsg-1
linux Debian:12
- Versions
- 6.1.106-1
- 6.1.106-2
- 6.1.106-3
- 6.1.112-1
- 6.1.115-1
- 6.1.119-1
- 6.1.123-1
- 6.1.124-1
- 6.1.128-1
- 6.1.129-1
- 6.1.133-1
- 6.1.135-1
- 6.1.137-1
- 6.1.139-1
- 6.1.140-1
- 6.1.147-1
- 6.1.148-1
- 6.1.153-1
- 6.1.158-1
- 6.1.159-1
- 6.1.162-1
- 6.1.164-1
- 6.1.170-1
- 6.1.170-2
- 6.1.170-3
- 6.1.172-1
- 6.1.174-1
- 6.1.27-1
- 6.1.37-1
- 6.1.38-1
- 6.1.38-2
- 6.1.38-2~bpo11+1
- 6.1.38-3
- 6.1.38-4
- 6.1.38-4~bpo11+1
- 6.1.52-1
- 6.1.55-1
- 6.1.55-1~bpo11+1
- 6.1.64-1
- 6.1.66-1
- 6.1.67-1
- 6.1.69-1
- 6.1.69-1~bpo11+1
- 6.1.76-1
- 6.1.76-1~bpo11+1
- 6.1.82-1
- 6.1.85-1
- 6.1.90-1
- 6.1.90-1~bpo11+1
- 6.1.94-1
- 6.1.94-1~bpo11+1
- 6.1.98-1
- 6.1.99-1
- Affected ranges
- ECOSYSTEM: < 6.1.176-1
Update to 6.1.176-1
Original sources
- https://developer.arm.com/documentation/112137
- http://xenbits.xen.org/xsa/advisory-493.html
- http://www.openwall.com/lists/oss-security/2026/06/09/13
- https://access.redhat.com/security/cve/CVE-2025-10263
- https://bugzilla.redhat.com/show_bug.cgi?id=2486958
- https://security.access.redhat.com/data/csaf/v2/vex/2025/cve-2025-10263.json
- https://access.redhat.com/errata/RHSA-2026:54205
- https://access.redhat.com/errata/RHSA-2026:54187
- https://access.redhat.com/errata/RHSA-2026:56786
- https://access.redhat.com/errata/RHSA-2026:56911
- https://access.redhat.com/errata/RHSA-2026:56853
- https://access.redhat.com/errata/RHSA-2026:60019
- https://access.redhat.com/errata/RHSA-2026:54544
- https://access.redhat.com/errata/RHSA-2026:54553
- https://access.redhat.com/errata/RHSA-2026:54581
- https://access.redhat.com/errata/RHSA-2026:54599
- https://access.redhat.com/errata/RHSA-2026:40764
- https://access.redhat.com/errata/RHSA-2026:55445
- https://access.redhat.com/errata/RHSA-2026:34911
- https://access.redhat.com/errata/RHSA-2026:51603
- https://access.redhat.com/errata/RHSA-2026:51746
- https://access.redhat.com/errata/RHSA-2026:49031
- https://access.redhat.com/errata/RHSA-2026:36018
- https://nvd.nist.gov/vuln/detail/CVE-2025-10263