CVE-2025-10263 is a race condition vulnerability (CWE-362) in the Linux kernel on ARM processors, including Arm C1-Ultra and various Neoverse and Cortex cores. The vulnerability arises from improper synchronization during Translation Lookaside Buffer Invalidation (TLBI) operations when memory permissions are altered. This flaw allows a local unprivileged attacker or a guest virtual machine to write to memory resources owned by higher exception levels, potentially leading to privilege escalation to kernel level or hypervisor escape. Red Hat's advisory confirms the impact and provides updates for affected products, including OpenShift Container Platform 4.22.6. The CVSS v3.1 base score is 9.1 (critical), reflecting high confidentiality and integrity impact with no required user interaction and low attack complexity.

The vulnerability enables a local unprivileged attacker or a guest VM to escalate privileges to kernel level or escape to the hypervisor by exploiting a race condition in TLBI operations. This results in complete system compromise, including unauthorized write access to memory resources at higher privilege levels. The CVSS score of 9.1 indicates critical severity with high confidentiality and integrity impacts but no impact on availability.

Red Hat has released security updates addressing CVE-2025-10263 in Red Hat OpenShift Container Platform 4.22.6 and associated kernel packages. Users should upgrade to these updated packages and images as soon as they are available via the appropriate release channels. Instructions for upgrading OpenShift clusters are provided by Red Hat. No vendor advisory indicates that no action is required or that the issue is already mitigated without updates. Therefore, applying the official patches is the recommended mitigation.