CVE-2025-10263 is a vulnerability in Arm processors (including C1-Ultra, C1-Premium, Neoverse V3 & V3AE, Neoverse V2, Neoverse V1, Neoverse-N2, Neoverse-N1, Cortex-X925, Cortex-X4, Cortex-X3, Cortex-X2, Cortex-X1 & X1C, Cortex-A710, Cortex-A78, A78AE & A78C, Cortex-A77, Cortex-A76 & A76A) that may allow unauthorized writes to resources owned by a higher exception level. This flaw can lead to privilege escalation or information disclosure. Red Hat Enterprise Linux kernel updates for versions 9 and 10 include patches that fix this issue. The updates require a system reboot to take effect. The vulnerability is tracked under Red Hat advisories RHSA-2026:34911 and RHSA-2026:36018.

Successful exploitation of this vulnerability could allow an attacker to escalate privileges or disclose sensitive information by writing to resources at a higher exception level on affected Arm processors. This compromises system security and confidentiality. The vulnerability affects multiple Red Hat Enterprise Linux versions on various hardware architectures including x86_64, IBM z Systems, Power (ppc64le), and ARM 64 (aarch64).

Red Hat has released official kernel updates for Red Hat Enterprise Linux versions 9 and 10 that address CVE-2025-10263. Applying these updates and rebooting the affected systems is required to remediate the vulnerability. Refer to Red Hat advisory RHSA-2026:34911 for RHEL 10 and RHSA-2026:36018 for RHEL 9 for detailed update instructions. No additional mitigations are indicated by the vendor advisory.