Memory Management Vulnerability in Arm CPUs

CVE-2025-0647

What is CVE-2025-0647?

A specific memory management issue exists in certain Arm CPUs where executing a CPP RCTX instruction on one Processing Element (PE) can prevent TLB invalidation. This occurs when a TLBI (Translation Lookaside Buffer Invalidate) is issued to the PE, either by itself or by another PE within the same shareability domain. Consequently, the affected PE may hold onto stale TLB entries that should have been cleared, potentially leading to data inconsistency and security risks.

References