CVE-2026-0995
CVE-2026-0995
This page contains facts from public vulnerability sources. Check the original advisory before updating.
An issue has been identified in Arm C1-Pro before r1p2-50eac0, where, under certain conditions, a TLBI+DSB might fail to ensure the completion of memory accesses related to SME.
CVSS 3.6 · Low · EPSS 0.1% · Fix available
- Published
- Updated
Stack: system
Affected products and versions
c1 pro
- Versions
- ≥ 0, < r1p2-50eac0: Affected (custom)
No fix published
arm-trusted-firmware Debian:12
- Versions
- 2.10.0+dfsg-1
- 2.10.10+dfsg-1
- 2.12.0+dfsg-1
- 2.12.0+dfsg-2
- 2.12.1+dfsg-1
- 2.12.16+dfsg-1
- 2.8.0+dfsg-1
- 2.9.0+dfsg-1
- 2.9.0+dfsg-2
- 2.9.0+dfsg-3
- Affected ranges
- ECOSYSTEM: (−∞, +∞)
No fix published
arm-trusted-firmware Debian:13
- Versions
- 2.12.1+dfsg-1
- 2.12.16+dfsg-1
- Affected ranges
- ECOSYSTEM: (−∞, +∞)
No fix published
arm-trusted-firmware Debian:14
- Versions
- 2.12.1+dfsg-1
- Affected ranges
- ECOSYSTEM: < 2.12.16+dfsg-1
Update to 2.12.16+dfsg-1