CVE-2026-0995

EUVD-2026-9178
An issue has been identified in Arm C1-Pro before r1p2-50eac0, where, under certain conditions, a TLBI+DSB might fail to ensure the completion of memory accesses related to SME.
Race Condition
ProviderTypeBase ScoreAtk. VectorAtk. ComplexityPriv. RequiredVector
NISTPrimary
3.6 LOW
LOCAL
HIGH
LOW
CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:L/A:L
Base Score
CVSS 3.x
EPSS Score
Percentile: 0.41%
Affected Products (NVD)
VendorProductVersion
armc1-pro_firmware
𝑥
< r1p2-50eac0
𝑥
= Vulnerable software versions
Debian logo
Debian Releases
Debian Product
Codename
arm-trusted-firmware
bookworm
vulnerable
forky
vulnerable
sid
2.12.16+dfsg-1
fixed
trixie
no-dsa
Common Weakness Enumeration
References
https://developer.arm.com/documentation/111823