CVE-2025-0647

Katalog CVE

CVSS 7.9 · High EPSS 0,17%

Kerentanan Sensitive Information in Resource Not Removed Before Reuse pada arm c1-ultra firmware, arm c1-premium firmware +9 lainnya. Skor CVSS 3.1 7.9 (High) menurut CISA ADP.

Deskripsi (NVD)

In certain Arm CPUs, a CPP RCTX instruction executed on one Processing Element (PE) may inhibit TLB invalidation when a TLBI is issued to the PE, either by the same PE or another PE in the shareability domain. In this case, the PE may retain stale TLB entries which should have been invalidated by the TLBI.

Rincian

Terbit di NVD

14 Januari 2026

Terakhir diubah

17 Juni 2026

Status NVD

Analyzed

CVSS 3.1

7.9 (High), sumber CISA ADP
CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:C/C:H/I:H/A:N · uraikan di kalkulator

Jenis kelemahan (CWE)

CWE-226: Sensitive Information in Resource Not Removed Before Reuse

EPSS (30 hari)

0,17% peluang dieksploitasi; lebih tinggi dari 5,6% CVE lain

Produk dan versi terdampak

> Data dari konfigurasi CPE di NVD.

Referensi dan perbaikan

• https://developer.arm.com/documentation/111546 advisory vendor
• https://graph.volerion.com/view?ID=CVE-2025-0647 advisory pihak ketiga