> CVE-2025-0647

« BACK_TO_HOME
PUBLISHED
2026-01-14 11:15
MODIFIED
2026-01-14 11:15
EPSS (Prob. Exploit)
0.17%
Top 94.0%
DATA SOURCES:
NVD 🔗 2026-01-14 CVE PROJECT 🔗 2026-01-19 CWE MITRE 🔗 2026-11-01 FIRST EPSS 🔗 2026-11-08

> DESCRIPTION

In certain Arm CPUs, a CPP RCTX instruction executed on one Processing Element (PE) may inhibit TLB invalidation when a TLBI is issued to the PE, either by the same PE or another PE in the shareability domain. In this case, the PE may retain stale TLB entries which should have been invalidated by the TLBI.

> AFFECTED_PRODUCTS

ℹ️ Aucun produit affecté n'a encore été publié par NVD pour cette CVE.

> WEAKNESSES

CWE-226

> CWE DETAILED DESCRIPTIONS

CWE-226: Sensitive Information in Resource Not Removed Before Reuse - The product releases a resource such as memory or a file so that it can be made available for reuse, but it does not clear or "zeroize" the information contained in the resource before the product performs a critical state transition or makes the resource available for reuse by other entities.

> HISTORIQUE DES MODIFICATIONS

Première apparition
14/01/2026 11:15
Source: NVD
📊 ENRICHISSEMENT 01/02/2026 06:44
CWE
Champ modifié: Description CWE
Ancienne valeur:
N/A
Nouvelle valeur:
CWE-226: Sensitive Information in Resource Not Removed Before Reuse - The product releases a resource such as memory or a file so that it can be made available for reuse, but it does not clear or "zer...
📊 ENRICHISSEMENT 19/01/2026 17:39
CVEPROJECT
Champ modifié: CVE Project
Ancienne valeur:
Non
Nouvelle valeur:
Oui
Total des modifications: 2 Dernière mise à jour: 9 months ago

> REFERENCES

https://developer.arm.com/documentation/111546
« BACK_TO_HOME