Vulnerability in Arm C1-Premium
CVE-2025-0647
In certain Arm CPUs, a CPP RCTX instruction executed on one Processing Element (PE) may inhibit TLB invalidation when a TLBI is issued to the PE, either by the same PE or another PE in the shareability domain. In this case, the PE may retain stale TLB entries which should have been invalidated by the TLBI.
EPSS: 0.002 (5.0th percentile) — read the EPSS interpretation.
CVSS v3 metric
CVSS v3 base score 7.9 (High). Vector: CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:C/C:H/I:H/A:N.
Affected products
- Arm C1-premium — versions 0
- Arm C1-premium_firmware
- Arm C1-ultra — versions 0
- Arm C1-ultra_firmware
- Arm Cortex-a710 — versions 0
- Arm Cortex-a710_firmware
- Arm Cortex-x2 — versions 0
- Arm Cortex-x2_firmware
- Arm Cortex-x3 — versions 0
- Arm Cortex-x3_firmware
Weakness classification (CWE)
References
- arm-security@arm.com (Vendor Advisory)
- 134c704f-9b21-4f2e-91b3-4a467353bcc0 (Third Party Advisory)
Frequently asked questions
- What is CVE-2025-0647?
- CVE-2025-0647 is a high-severity vulnerability in Arm C1-Premium, classified under Sensitive Information in Resource Not Removed Before Reuse. CVSS score: 7.9/10. Published 2026-01-14.
- How severe is CVE-2025-0647?
- High severity. CVSS v3 base score is 7.9 out of 10.