CVE-2025-10263: CWE-362 Concurrent Execution using Shared Resource with Improper Synchronization ('Race Condition') in Arm C1-Ultra
Arm C1-Ultra, C1-Premium, Neoverse V3 & V3AE, Neoverse V2, Neoverse V1, Neoverse-N2, Neoverse-N1, Cortex-X925, Cortex-X4, Cortex-X3, Cortex-X2, Cortex-X1 & X1C, Cortex-A710, Cortex-A78, A78AE & A78C, Cortex-A77, Cortex-A76 & A76A may allow writes to resources owned by a higher exception level.
AI Analysis
Technical Summary
CVE-2025-10263 is a race condition vulnerability (CWE-362) in Arm processors such as C1-Ultra, C1-Premium, Neoverse V3 & V3AE, Neoverse V2, Neoverse V1, Neoverse-N2, Neoverse-N1, and several Cortex cores (X925, X4, X3, X2, X1 & X1C, A710, A78, A78AE, A78C, A77, A76 & A76A). The issue allows unauthorized writes to resources owned by a higher exception level, which can lead to privilege escalation or information disclosure. The vulnerability has a CVSS 3.1 base score of 9.1 (AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N). Red Hat's advisory for OpenShift Container Platform 4.22.6 includes kernel fixes addressing this vulnerability. No known exploits in the wild have been reported. The affected versions include Arm C1-Ultra versions >=10 and =10.2. The vendor has not explicitly stated a remediation level or patch availability for the Arm processors themselves, but Red Hat has provided patched container images and kernel updates for their OpenShift platform incorporating these fixes.
Potential Impact
Successful exploitation of this vulnerability can allow an attacker to perform writes to resources owned by a higher exception level on affected Arm processors, resulting in privilege escalation or information disclosure. This can compromise the confidentiality and integrity of the system. The CVSS score of 9.1 reflects a critical impact with network attack vector, no privileges required, and no user interaction needed. There are no reports of known exploits in the wild at this time.
Mitigation Recommendations
Red Hat has released security updates in OpenShift Container Platform 4.22.6 that include kernel fixes addressing CVE-2025-10263. Users of affected Red Hat OpenShift Container Platform versions should upgrade to these updated packages and images via the appropriate release channels. Instructions for upgrading are available in Red Hat's official documentation. There is no explicit vendor advisory or patch status for the Arm processors themselves; therefore, patch status for those should be confirmed with Arm or the respective hardware vendor. No other mitigation or workaround is specified in the advisory.
CVE-2025-10263: CWE-362 Concurrent Execution using Shared Resource with Improper Synchronization ('Race Condition') in Arm C1-Ultra
Description
Arm C1-Ultra, C1-Premium, Neoverse V3 & V3AE, Neoverse V2, Neoverse V1, Neoverse-N2, Neoverse-N1, Cortex-X925, Cortex-X4, Cortex-X3, Cortex-X2, Cortex-X1 & X1C, Cortex-A710, Cortex-A78, A78AE & A78C, Cortex-A77, Cortex-A76 & A76A may allow writes to resources owned by a higher exception level.
CVSS v3.1
Score 9.1critical
Affected software
AI-Powered Analysis
Machine-generated threat intelligence
Technical Analysis
CVE-2025-10263 is a race condition vulnerability (CWE-362) in Arm processors such as C1-Ultra, C1-Premium, Neoverse V3 & V3AE, Neoverse V2, Neoverse V1, Neoverse-N2, Neoverse-N1, and several Cortex cores (X925, X4, X3, X2, X1 & X1C, A710, A78, A78AE, A78C, A77, A76 & A76A). The issue allows unauthorized writes to resources owned by a higher exception level, which can lead to privilege escalation or information disclosure. The vulnerability has a CVSS 3.1 base score of 9.1 (AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N). Red Hat's advisory for OpenShift Container Platform 4.22.6 includes kernel fixes addressing this vulnerability. No known exploits in the wild have been reported. The affected versions include Arm C1-Ultra versions >=10 and =10.2. The vendor has not explicitly stated a remediation level or patch availability for the Arm processors themselves, but Red Hat has provided patched container images and kernel updates for their OpenShift platform incorporating these fixes.
Potential Impact
Successful exploitation of this vulnerability can allow an attacker to perform writes to resources owned by a higher exception level on affected Arm processors, resulting in privilege escalation or information disclosure. This can compromise the confidentiality and integrity of the system. The CVSS score of 9.1 reflects a critical impact with network attack vector, no privileges required, and no user interaction needed. There are no reports of known exploits in the wild at this time.
Mitigation Recommendations
Red Hat has released security updates in OpenShift Container Platform 4.22.6 that include kernel fixes addressing CVE-2025-10263. Users of affected Red Hat OpenShift Container Platform versions should upgrade to these updated packages and images via the appropriate release channels. Instructions for upgrading are available in Red Hat's official documentation. There is no explicit vendor advisory or patch status for the Arm processors themselves; therefore, patch status for those should be confirmed with Arm or the respective hardware vendor. No other mitigation or workaround is specified in the advisory.
Technical Details
- Data Version
- 5.2
- Assigner Short Name
- Arm
- Date Reserved
- 2025-09-11T08:50:36.018Z
- Cvss Version
- null
- State
- PUBLISHED
- Remediation Level
- null
- Vendor Advisory Urls
- [{"url":"https://access.redhat.com/security/cve/CVE-2025-10263","vendor":"Red Hat"}]
Threat ID: 6a27e6ab8dd33fbd8514c95e
Added to database: 06/09/2026, 10:10:51 UTC
Last enriched: 07/31/2026, 14:25:52 UTC
Last updated: 07/31/2026, 21:26:44 UTC
Views: 76
Community Reviews
0 reviewsCrowdsource mitigation strategies, share intel context, and vote on the most helpful responses. Sign in to add your voice and help keep defenders ahead.
Want to contribute mitigation steps or threat intel context? Sign in or create an account to join the community discussion.
Actions
Updates to AI analysis require Pro Console access. Upgrade inside Console → Billing.
Need more coverage?
Upgrade to Pro Console for AI refresh and higher limits.
For incident response and remediation, OffSeq services can help resolve threats faster.
Latest Threats
Check if your credentials are on the dark web
Instant breach scanning across billions of leaked records. Free tier available.