<Vulnerability name="CVE-2025-10263">
    <DocumentDistribution xml:lang="en">Copyright © 2012 Red Hat, Inc. All rights reserved.</DocumentDistribution>
    <ThreatSeverity>Important</ThreatSeverity>
    <PublicDate>2026-06-09T09:23:18</PublicDate>
    <Bugzilla id="2486958" url="https://bugzilla.redhat.com/show_bug.cgi?id=2486958" xml:lang="en:us">
kernel: Arm Processors: Privilege escalation or information disclosure via writes to higher exception level resources
    </Bugzilla>
    <CVSS3 status="verified">
        <CVSS3BaseScore>8.4</CVSS3BaseScore>
        <CVSS3ScoringVector>CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:N</CVSS3ScoringVector>
    </CVSS3>
    <CWE>CWE-266</CWE>
    <Details xml:lang="en:us" source="Mitre">
Arm C1-Ultra, C1-Premium, Neoverse V3 &amp; V3AE, Neoverse V2, Neoverse V1, Neoverse-N2, Neoverse-N1, Cortex-X925, Cortex-X4, Cortex-X3, Cortex-X2, Cortex-X1 &amp; X1C, Cortex-A710, Cortex-A78, A78AE &amp; A78C, Cortex-A77, Cortex-A76 &amp; A76A may allow writes to resources owned by a higher exception level.
    </Details>
    <Details xml:lang="en:us" source="Red Hat">
A flaw was found in the Linux kernel on ARM processors. A race condition in Translation Lookaside Buffer Invalidation (TLBI) operations during memory permission changes allows a local attacker to write to memory resources owned by higher privilege levels. This could allow an unprivileged local attacker to gain kernel privileges or a guest VM to escape to the hypervisor, resulting in complete system compromise.
    </Details>
    <Statement xml:lang="en:us">
This is an Important flaw in the Linux kernel on ARM processors, allowing a local unprivileged attacker to achieve privilege escalation to kernel level or a guest virtual machine to escape to the hypervisor. The vulnerability stems from a race condition during Translation Lookaside Buffer Invalidation (TLBI) operations when memory permissions are altered, enabling writes to higher exception level resources.
    </Statement>
    <AffectedRelease cpe="cpe:/o:redhat:enterprise_linux:10.2">
        <ProductName>Red Hat Enterprise Linux 10</ProductName>
        <ReleaseDate>2026-07-02T00:00:00Z</ReleaseDate>
        <Advisory type="RHSA" url="https://access.redhat.com/errata/RHSA-2026:34911">RHSA-2026:34911</Advisory>
        <Package name="kernel">kernel-0:6.12.0-211.30.1.el10_2</Package>
    </AffectedRelease>
    <AffectedRelease cpe="cpe:/a:redhat:enterprise_linux:8::nfv">
        <ProductName>Red Hat Enterprise Linux 8</ProductName>
        <ReleaseDate>2026-07-07T00:00:00Z</ReleaseDate>
        <Advisory type="RHSA" url="https://access.redhat.com/errata/RHSA-2026:36348">RHSA-2026:36348</Advisory>
        <Package name="kernel-rt">kernel-rt-0:4.18.0-553.140.1.rt7.481.el8_10</Package>
    </AffectedRelease>
    <AffectedRelease cpe="cpe:/o:redhat:enterprise_linux:8">
        <ProductName>Red Hat Enterprise Linux 8</ProductName>
        <ReleaseDate>2026-07-07T00:00:00Z</ReleaseDate>
        <Advisory type="RHSA" url="https://access.redhat.com/errata/RHSA-2026:36349">RHSA-2026:36349</Advisory>
        <Package name="kernel">kernel-0:4.18.0-553.140.1.el8_10</Package>
    </AffectedRelease>
    <AffectedRelease cpe="cpe:/o:redhat:rhel_aus:8.4">
        <ProductName>Red Hat Enterprise Linux 8.4 Advanced Mission Critical Update Support</ProductName>
        <ReleaseDate>2026-07-28T00:00:00Z</ReleaseDate>
        <Advisory type="RHSA" url="https://access.redhat.com/errata/RHSA-2026:47248">RHSA-2026:47248</Advisory>
        <Package name="kernel">kernel-0:4.18.0-305.200.1.el8_4</Package>
    </AffectedRelease>
    <AffectedRelease cpe="cpe:/o:redhat:rhel_eus_long_life:8.4">
        <ProductName>Red Hat Enterprise Linux 8.4 Extended Update Support Long-Life Add-On</ProductName>
        <ReleaseDate>2026-07-28T00:00:00Z</ReleaseDate>
        <Advisory type="RHSA" url="https://access.redhat.com/errata/RHSA-2026:47248">RHSA-2026:47248</Advisory>
        <Package name="kernel">kernel-0:4.18.0-305.200.1.el8_4</Package>
    </AffectedRelease>
    <AffectedRelease cpe="cpe:/o:redhat:rhel_aus:8.6">
        <ProductName>Red Hat Enterprise Linux 8.6 Advanced Mission Critical Update Support</ProductName>
        <ReleaseDate>2026-07-31T00:00:00Z</ReleaseDate>
        <Advisory type="RHSA" url="https://access.redhat.com/errata/RHSA-2026:49033">RHSA-2026:49033</Advisory>
        <Package name="kernel">kernel-0:4.18.0-372.204.1.el8_6</Package>
    </AffectedRelease>
    <AffectedRelease cpe="cpe:/o:redhat:rhel_eus_long_life:8.6">
        <ProductName>Red Hat Enterprise Linux 8.6 Extended Update Support Long-Life Add-On</ProductName>
        <ReleaseDate>2026-07-31T00:00:00Z</ReleaseDate>
        <Advisory type="RHSA" url="https://access.redhat.com/errata/RHSA-2026:49033">RHSA-2026:49033</Advisory>
        <Package name="kernel">kernel-0:4.18.0-372.204.1.el8_6</Package>
    </AffectedRelease>
    <AffectedRelease cpe="cpe:/a:redhat:enterprise_linux:9">
        <ProductName>Red Hat Enterprise Linux 9</ProductName>
        <ReleaseDate>2026-07-06T00:00:00Z</ReleaseDate>
        <Advisory type="RHSA" url="https://access.redhat.com/errata/RHSA-2026:36018">RHSA-2026:36018</Advisory>
        <Package name="kernel">kernel-0:5.14.0-687.22.1.el9_8</Package>
    </AffectedRelease>
    <AffectedRelease cpe="cpe:/o:redhat:enterprise_linux:9">
        <ProductName>Red Hat Enterprise Linux 9</ProductName>
        <ReleaseDate>2026-07-06T00:00:00Z</ReleaseDate>
        <Advisory type="RHSA" url="https://access.redhat.com/errata/RHSA-2026:36018">RHSA-2026:36018</Advisory>
        <Package name="kernel">kernel-0:5.14.0-687.22.1.el9_8</Package>
    </AffectedRelease>
    <AffectedRelease cpe="cpe:/a:redhat:rhel_eus:9.6">
        <ProductName>Red Hat Enterprise Linux 9.6 Extended Update Support</ProductName>
        <ReleaseDate>2026-07-31T00:00:00Z</ReleaseDate>
        <Advisory type="RHSA" url="https://access.redhat.com/errata/RHSA-2026:49031">RHSA-2026:49031</Advisory>
        <Package name="kernel">kernel-0:5.14.0-570.131.1.el9_6</Package>
    </AffectedRelease>
    <AffectedRelease cpe="cpe:/a:redhat:openshift:4.22::el9">
        <ProductName>Red Hat OpenShift Container Platform 4.22</ProductName>
        <ReleaseDate>2026-07-21T00:00:00Z</ReleaseDate>
        <Advisory type="RHSA" url="https://access.redhat.com/errata/RHSA-2026:40764">RHSA-2026:40764</Advisory>
        <Package name="rhcos">rhcos-4.22.9.8.202607152026-0</Package>
    </AffectedRelease>
    <PackageState cpe="cpe:/o:redhat:enterprise_linux:10">
        <ProductName>Red Hat Enterprise Linux 10</ProductName>
        <FixState>Not affected</FixState>
        <PackageName>libkrun</PackageName>
    </PackageState>
    <PackageState cpe="cpe:/o:redhat:enterprise_linux:6">
        <ProductName>Red Hat Enterprise Linux 6</ProductName>
        <FixState>Not affected</FixState>
        <PackageName>kernel</PackageName>
    </PackageState>
    <PackageState cpe="cpe:/o:redhat:enterprise_linux:7">
        <ProductName>Red Hat Enterprise Linux 7</ProductName>
        <FixState>Not affected</FixState>
        <PackageName>kernel</PackageName>
    </PackageState>
    <PackageState cpe="cpe:/o:redhat:enterprise_linux:7">
        <ProductName>Red Hat Enterprise Linux 7</ProductName>
        <FixState>Not affected</FixState>
        <PackageName>kernel-rt</PackageName>
    </PackageState>
    <PackageState cpe="cpe:/o:redhat:enterprise_linux:9">
        <ProductName>Red Hat Enterprise Linux 9</ProductName>
        <FixState>Fix deferred</FixState>
        <PackageName>kernel-rt</PackageName>
    </PackageState>
    <PackageState cpe="cpe:/a:redhat:enterprise_linux_nvidia:">
        <ProductName>Red Hat Enterprise Linux for NVIDIA 26</ProductName>
        <FixState>Affected</FixState>
        <PackageName>kernel</PackageName>
    </PackageState>
    <References xml:lang="en:us">
https://www.cve.org/CVERecord?id=CVE-2025-10263
https://nvd.nist.gov/vuln/detail/CVE-2025-10263
https://developer.arm.com/documentation/112137
    </References>
</Vulnerability>