CVE-2025-10263: Xen Security Advisory 493 v2 (CVE-2025-10263) - Arm: Completion of memory accesses not guaranteed by completion of a TLBI
Arm C1-Ultra, C1-Premium, Neoverse V3 & V3AE, Neoverse V2, Neoverse V1, Neoverse-N2, Neoverse-N1, Cortex-X925, Cortex-X4, Cortex-X3, Cortex-X2, Cortex-X1 & X1C, Cortex-A710, Cortex-A78, A78AE & A78C, Cortex-A77, Cortex-A76 & A76A may allow writes to resources owned by a higher exception level.
Other sources
ARM: CVE-2025-10263 Completion of affected memory accesses might not be guaranteed by completion of a TLBI [kernel]
— Microsoft
No cwe for this issue in Windows Kernel allows an unauthorized attacker to elevate privileges locally.
— Microsoft
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade to a fixed release to a version that resolves this vulnerability.
Patch Xen Security Advisory 493 v2
Event History
Frequently Asked Questions
What is the severity of CVE-2025-10263?
The severity of CVE-2025-10263 is critical, rated at 9.3 on the CVSS scale.
How do I fix CVE-2025-10263?
To mitigate CVE-2025-10263, ensure that the affected devices are updated with the latest security patches provided by the vendor.
Which systems are affected by CVE-2025-10263?
CVE-2025-10263 affects Arm processors such as C1-Ultra, C1-Premium, and various Neoverse models, as well as Microsoft Windows 10 and 11.
What type of vulnerability is CVE-2025-10263 classified as?
CVE-2025-10263 is classified as a race condition vulnerability.
What are the potential impacts of CVE-2025-10263?
CVE-2025-10263 may allow unauthorized writes to resources owned by a higher exception level, leading to system instability or security breaches.