--- id: CVE-2025-10263 title: >- Arm C1-Ultra, C1-Premium, Neoverse V3 & V3AE, Neoverse V2, Neoverse V1, Neoverse-N2, Neoverse-N1, Cortex-X925, Cortex-X4, Cortex-X3, Cortex-X2, Cortex-X1 & X1C, Cortex-A710, Cortex-A78, A78AE & A78C, Cortex-A77, Cortex-A76 & A76A may all… summary: >- Arm C1-Ultra, C1-Premium, Neoverse V3 & V3AE, Neoverse V2, Neoverse V1, Neoverse-N2, Neoverse-N1, Cortex-X925, Cortex-X4, Cortex-X3, Cortex-X2, Cortex-X1 & X1C, Cortex-A710, Cortex-A78, A78AE & A78C, Cortex-A77, Cortex-A76 & A76A may all… severity: critical cvss: 9.1 cvssVector: 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N' cwe: - CWE-362 - CWE-266 published: '2026-06-09' updated: '2026-07-03' source: NVD sourceUrl: 'https://nvd.nist.gov/vuln/detail/CVE-2025-10263' references: - url: 'https://developer.arm.com/documentation/112137' label: arm-security@arm.com - url: 'http://www.openwall.com/lists/oss-security/2026/06/09/13' label: af854a3a-2127-422b-91ae-364da2661108 - url: 'http://xenbits.xen.org/xsa/advisory-493.html' label: af854a3a-2127-422b-91ae-364da2661108 - url: 'https://access.redhat.com/errata/RHSA-2026:34911' label: 0b0ca135-0b70-47e7-9f44-1890c2a1c46c - url: 'https://access.redhat.com/security/cve/CVE-2025-10263' label: 0b0ca135-0b70-47e7-9f44-1890c2a1c46c - url: 'https://bugzilla.redhat.com/show_bug.cgi?id=2486958' label: 0b0ca135-0b70-47e7-9f44-1890c2a1c46c - url: >- https://security.access.redhat.com/data/csaf/v2/vex/2025/cve-2025-10263.json label: 0b0ca135-0b70-47e7-9f44-1890c2a1c46c - url: 'https://www.cve.org/CVERecord?id=CVE-2025-10263' - url: 'https://nvd.nist.gov/vuln/detail/CVE-2025-10263' - url: 'https://access.redhat.com/errata/RHSA-2026:54205' - url: 'https://access.redhat.com/errata/RHSA-2026:54187' - url: 'https://access.redhat.com/errata/RHSA-2026:56786' - url: 'https://access.redhat.com/errata/RHSA-2026:56911' - url: 'https://access.redhat.com/errata/RHSA-2026:56853' - url: 'https://access.redhat.com/errata/RHSA-2026:60019' - url: 'https://access.redhat.com/errata/RHSA-2026:54544' - url: 'https://access.redhat.com/errata/RHSA-2026:54553' - url: 'https://access.redhat.com/errata/RHSA-2026:54581' - url: 'https://access.redhat.com/errata/RHSA-2026:54599' - url: 'https://access.redhat.com/errata/RHSA-2026:40764' - url: 'https://access.redhat.com/errata/RHSA-2026:55445' - url: 'https://access.redhat.com/errata/RHSA-2026:51603' - url: 'https://access.redhat.com/errata/RHSA-2026:51746' - url: 'https://access.redhat.com/errata/RHSA-2026:49031' - url: 'https://access.redhat.com/errata/RHSA-2026:36018' - url: 'https://access.redhat.com/errata/RHSA-2026:36349' - url: 'https://access.redhat.com/errata/RHSA-2026:47248' - url: 'https://access.redhat.com/errata/RHSA-2026:49033' - url: 'https://access.redhat.com/errata/RHSA-2026:52649' - url: 'https://access.redhat.com/errata/RHSA-2026:36348' - url: 'https://access.redhat.com/errata/RHSA-2026:51604' tags: - nvd - csaf - vex - red-hat - exploit-available epss: 0.00544 epssPercentile: 0.45462 ingestedAt: '2026-07-03T14:03:37.081Z' vendor: Red Hat product: Red Hat Enterprise Linux BaseOS E4S (v.9.4) affected: - enterprise_linux 9 - enterprise_linux_for_nvidia 26 - openshift_container_platform 4.12 - openshift_container_platform 4.13 - openshift_container_platform 4.14 - openshift_container_platform 4.15 - openshift_container_platform 4.16 - openshift_container_platform 4.17 - openshift_container_platform 4.18 - openshift_container_platform 4.19 - openshift_container_platform 4.20 - openshift_container_platform 4.21 - openshift_container_platform 4.22 - enterprise_linux_appstream_eus_v_10_0 - enterprise_linux_appstream_v_10 - enterprise_linux_appstream_e4s_v_9_2 - enterprise_linux_appstream_e4s_v_9_4 - enterprise_linux_appstream_eus_v_9_6 - enterprise_linux_appstream_v_9 - enterprise_linux_baseos_eus_v_10_0 - enterprise_linux_baseos_v_10 - enterprise_linux_baseos_v_8 - enterprise_linux_baseos_aus_v_8_4 - enterprise_linux_baseos_eus_extension_v_8_4 - enterprise_linux_baseos_aus_v_8_6 - enterprise_linux_baseos_eus_extension_v_8_6 - enterprise_linux_baseos_e4s_v_8_8 - enterprise_linux_baseos_tus_v_8_8 - enterprise_linux_baseos_e4s_v_9_2 - enterprise_linux_baseos_e4s_v_9_4 - enterprise_linux_baseos_eus_v_9_6 - enterprise_linux_baseos_v_9 - enterprise_linux_codeready_linux_builder_eus_v_10_0 - enterprise_linux_codeready_linux_builder_v_10 - enterprise_linux_crb_v_8 - codeready_linux_builder_eus_v_9_6 - enterprise_linux_codeready_linux_builder_v_9 - enterprise_linux_real_time_for_nfv_eus_v_10_0 - enterprise_linux_real_time_for_nfv_v_10 - enterprise_linux_nfv_v_8 patched: - openshift_container_platform 4.12 - openshift_container_platform 4.13 - openshift_container_platform 4.14 - openshift_container_platform 4.15 - openshift_container_platform 4.16 - openshift_container_platform 4.17 - openshift_container_platform 4.18 - openshift_container_platform 4.19 - openshift_container_platform 4.20 - openshift_container_platform 4.21 - openshift_container_platform 4.22 - enterprise_linux_appstream_eus_v_10_0 - enterprise_linux_appstream_v_10 - enterprise_linux_appstream_e4s_v_9_2 - enterprise_linux_appstream_e4s_v_9_4 - enterprise_linux_appstream_eus_v_9_6 - enterprise_linux_appstream_v_9 - enterprise_linux_baseos_eus_v_10_0 - enterprise_linux_baseos_v_10 - enterprise_linux_baseos_v_8 - enterprise_linux_baseos_aus_v_8_4 - enterprise_linux_baseos_eus_extension_v_8_4 - enterprise_linux_baseos_aus_v_8_6 - enterprise_linux_baseos_eus_extension_v_8_6 - enterprise_linux_baseos_e4s_v_8_8 - enterprise_linux_baseos_tus_v_8_8 - enterprise_linux_baseos_e4s_v_9_2 - enterprise_linux_baseos_e4s_v_9_4 - enterprise_linux_baseos_eus_v_9_6 - enterprise_linux_baseos_v_9 - enterprise_linux_codeready_linux_builder_eus_v_10_0 - enterprise_linux_codeready_linux_builder_v_10 - enterprise_linux_crb_v_8 - codeready_linux_builder_eus_v_9_6 - enterprise_linux_codeready_linux_builder_v_9 - enterprise_linux_real_time_for_nfv_eus_v_10_0 - enterprise_linux_real_time_for_nfv_v_10 - enterprise_linux_nfv_v_8 - enterprise_linux_real_time_for_nfv_e4s_v_9_2 - enterprise_linux_real_time_for_nfv_e4s_v_9_4 scores: nvd: 9.1 vendor: 8.4 exploits: github: 1 githubRepos: - 'https://github.com/mikedejesushuembesrodriguez-max/erratumcheck' checkedAt: '2026-10-27T16:50:31.148Z' exploitAvailable: true --- ## Overview Arm C1-Ultra, C1-Premium, Neoverse V3 & V3AE, Neoverse V2, Neoverse V1, Neoverse-N2, Neoverse-N1, Cortex-X925, Cortex-X4, Cortex-X3, Cortex-X2, Cortex-X1 & X1C, Cortex-A710, Cortex-A78, A78AE & A78C, Cortex-A77, Cortex-A76 & A76A may allow writes to resources owned by a higher exception level. ## Remediation Refer to the linked advisories for vendor-supplied fixes and affected version ranges. ## Vendor advisories - **RHSA-2026:54205** · Red Hat · fixed in: Red Hat OpenShift Container Platform 4.12 · released 2026-08-20 · [advisory](https://access.redhat.com/errata/RHSA-2026:54205) - **RHSA-2026:54187** · Red Hat · fixed in: Red Hat OpenShift Container Platform 4.13 · released 2026-08-20 · [advisory](https://access.redhat.com/errata/RHSA-2026:54187) - **RHSA-2026:56786** · Red Hat · fixed in: Red Hat OpenShift Container Platform 4.14 · released 2026-08-31 · [advisory](https://access.redhat.com/errata/RHSA-2026:56786) - **RHSA-2026:56911** · Red Hat · fixed in: Red Hat OpenShift Container Platform 4.15 · released 2026-08-31 · [advisory](https://access.redhat.com/errata/RHSA-2026:56911) - **RHSA-2026:56853** · Red Hat · fixed in: Red Hat OpenShift Container Platform 4.16 · released 2026-08-31 · [advisory](https://access.redhat.com/errata/RHSA-2026:56853) - **RHSA-2026:60019** · Red Hat · fixed in: Red Hat OpenShift Container Platform 4.17 · released 2026-09-03 · [advisory](https://access.redhat.com/errata/RHSA-2026:60019) - **RHSA-2026:54544** · Red Hat · fixed in: Red Hat OpenShift Container Platform 4.18 · released 2026-08-19 · [advisory](https://access.redhat.com/errata/RHSA-2026:54544) - **RHSA-2026:54553** · Red Hat · fixed in: Red Hat OpenShift Container Platform 4.19 · released 2026-08-19 · [advisory](https://access.redhat.com/errata/RHSA-2026:54553) - **RHSA-2026:54581** · Red Hat · fixed in: Red Hat OpenShift Container Platform 4.20 · released 2026-08-18 · [advisory](https://access.redhat.com/errata/RHSA-2026:54581) - **RHSA-2026:54599** · Red Hat · fixed in: Red Hat OpenShift Container Platform 4.21 · released 2026-08-18 · [advisory](https://access.redhat.com/errata/RHSA-2026:54599) - **RHSA-2026:40764** · Red Hat · fixed in: Red Hat OpenShift Container Platform 4.22 · released 2026-07-21 · [advisory](https://access.redhat.com/errata/RHSA-2026:40764) - **Red Hat VEX** · Important · affected: Red Hat Enterprise Linux 9, Red Hat Enterprise Linux for NVIDIA 26 · no fix planned: Red Hat Enterprise Linux for NVIDIA 26, Red Hat Enterprise Linux 9 · updated 2026-10-09 · [vex](https://security.access.redhat.com/data/csaf/v2/vex/2025/cve-2025-10263.json)