CVE-2025-0647

Published: Jan 14, 2026Modified: Jun 17, 2026

7.9

Vector

CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:C/C:H/I:H/A:N

Exploitability: 1.5 / Impact: 5.8

Source: 134c704f-9b21-4f2e-91b3-4a467353bcc0 (Secondary)

Description

In certain Arm CPUs, a CPP RCTX instruction executed on one Processing Element (PE) may inhibit TLB invalidation when a TLBI is issued to the PE, either by the same PE or another PE in the shareability domain. In this case, the PE may retain stale TLB entries which should have been invalidated by the TLBI.

Affected (11)

Products: Arm: C1 Ultra Firmware, C1 Premium Firmware, Cortex A710 Firmware, Cortex X2 Firmware, Cortex X3 Firmware, Cortex X4 Firmware, Cortex X925 Firmware, Neoverse V2 Firmware, Neoverse V3 Firmware, Neoverse V3ae Firmware, Neoverse N2 Firmware

11 products

Neoverse V3ae Firmware

Neoverse N2 Firmware

Configuration A

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Arm C1 Ultra Firmware	All versions

Running on/with	Platform Versions
Arm C1 Ultra	All versions

Configuration B

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Arm C1 Premium Firmware	All versions

Running on/with	Platform Versions
Arm C1 Premium	All versions

Configuration C

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Arm Cortex A710 Firmware	All versions

Running on/with	Platform Versions
Arm Cortex A710	All versions

Configuration D

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Arm Cortex X2 Firmware	All versions

Running on/with	Platform Versions
Arm Cortex X2	All versions

Configuration E

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Arm Cortex X3 Firmware	All versions

Running on/with	Platform Versions
Arm Cortex X3	All versions

Configuration F

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Arm Cortex X4 Firmware	All versions

Running on/with	Platform Versions
Arm Cortex X4	All versions

Configuration G

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Arm Cortex X925 Firmware	All versions

Running on/with	Platform Versions
Arm Cortex X925	All versions

Configuration H

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Arm Neoverse V2 Firmware	All versions

Running on/with	Platform Versions
Arm Neoverse V2	All versions

Configuration I

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Arm Neoverse V3 Firmware	All versions

Running on/with	Platform Versions
Arm Neoverse V3	All versions

Configuration J

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Arm Neoverse V3ae Firmware	All versions

Running on/with	Platform Versions
Arm Neoverse V3ae	All versions

Configuration K

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Arm Neoverse N2 Firmware	All versions

Running on/with	Platform Versions
Arm Neoverse N2	All versions

Related CWEs

CWE-226

Sensitive Information in Resource Not Removed Before Reuse

The product releases a resource such as memory or a file so that it can be made available for reuse, but it does not clear or "zeroize" the information contained in the resource before the product performs a critical state transition or makes the resource available for reuse by other entities.

References (2)

https://developer.arm.com/documentation/111546

Source: arm-security@arm.com

Vendor Advisory

https://graph.volerion.com/view?ID=CVE-2025-0647

Source: 134c704f-9b21-4f2e-91b3-4a467353bcc0

Third Party Advisory

Timeline

No history available yet.