UBUNTU-CVE-2025-0647: High severity ubuntu/arm-trusted-firmware vulnerability
Published Nov 9, 2026
·Updated
(In certain Arm CPUs, a CPP RCTX instruction executed on one Processing ...)
Affected Software
5 affected components
ubuntu/arm-trusted-firmware*
ubuntu/arm-trusted-firmware*
ubuntu/arm-trusted-firmware*
ubuntu/arm-trusted-firmware*
ubuntu/arm-trusted-firmware*
Event History
Nov 9, 2026
CVE Published
via OSV·12:00 AM
Data Sourced
via OSV·12:00 AM
DescriptionSeverityAffected Software
Frequently Asked Questions
1
What level of access does an attacker need?
Exploitation requires local access and high privileges. No user interaction is required.
2
What is the potential impact if exploitation succeeds?
The vulnerability can have high confidentiality and integrity impact, including across a security scope boundary. The availability impact is rated as none.
3
Which systems should be investigated?
Investigate Ubuntu systems using arm-trusted-firmware on the affected class of Arm CPUs. The available information does not identify specific CPU models or affected package versions.