CVE-2025-10263: RCE via Higher-EL Write Escalation in Arm CPUs
CVE-2025-10263 Published on June 9, 2026

Arm C1-Ultra, C1-Premium, Neoverse V3 & V3AE, Neoverse V2, Neoverse V1, Neoverse-N2, Neoverse-N1, Cortex-X925, Cortex-X4, Cortex-X3, Cortex-X2, Cortex-X1 & X1C, Cortex-A710, Cortex-A78, A78AE & A78C, Cortex-A77, Cortex-A76 & A76A may allow writes to resources owned by a higher exception level.

NVD

Vulnerability Analysis

CVE-2025-10263 can be exploited with local system access, and requires small amount of user privileges. This vulnerability is considered to have a low attack complexity. The potential impact of an exploit of this vulnerability is considered to have a high impact on confidentiality and integrity, and no impact on availability.

Attack Vector:
LOCAL
Attack Complexity:
LOW
Privileges Required:
LOW
User Interaction:
NONE
Scope:
CHANGED
Confidentiality Impact:
HIGH
Integrity Impact:
HIGH
Availability Impact:
NONE

Weakness Types

What is a Race Condition Vulnerability?

The program contains a code sequence that can run concurrently with other code, and the code sequence requires temporary, exclusive access to a shared resource, but a timing window exists in which the shared resource can be modified by another code sequence that is operating concurrently.

CVE-2025-10263 has been classified to as a Race Condition vulnerability or weakness.

Incorrect Privilege Assignment

A product incorrectly assigns a privilege to a particular actor, creating an unintended sphere of control for that actor.


Products Associated with CVE-2025-10263

Want to know whenever a new CVE is published for Red Hat products? stack.watch will email you.

Red Hat Enterprise Linux (RHEL)
 
Red Hat Enterprise Linux Nvidia
 
Red Hat Openshift
 

Affected Versions

Arm C1-Ultra: Arm C1-Premium: Arm Neoverse V3: Arm Neoverse V3AE: Arm Neoverse V1: Arm Neoverse N2: Arm Neoverse N1: Arm Cortex-X925: Arm Cortex-X4: Arm Cortex-X3: Arm Cortex-X2: Arm Cortex-X1: Arm Cortex-X1C: Arm Cortex-A710: Arm Cortex-A78: Arm Cortex-A78AE: Arm Cortex-A78C: Arm Cortex-A77: Arm Cortex-A76: Arm Cortex-A76AE: Red Hat Enterprise Linux AppStream (v. 10): Red Hat Enterprise Linux BaseOS (v. 10): Red Hat Enterprise Linux CodeReady Linux Builder (v. 10): Red Hat Enterprise Linux Real Time for NFV (v. 10): Red Hat Enterprise Linux Real Time (v. 10): Red Hat Enterprise Linux 10: Red Hat Enterprise Linux 8: Red Hat Enterprise Linux 9: Red Hat Enterprise Linux for NVIDIA 26: Red Hat OpenShift Container Platform 4: Red Hat Enterprise Linux 6: Red Hat Enterprise Linux 7:

Exploit Probability

EPSS
0.46%
Percentile
36.85%

EPSS (Exploit Prediction Scoring System) scores estimate the probability that a vulnerability will be exploited in the wild within the next 30 days. The percentile shows you how this score compares to all other vulnerabilities.