critical
9.1
CVE-2025-10263 json
Arm C1-Ultra, C1-Premium, Neoverse V3 & V3AE, Neoverse V2, Neoverse V1, Neoverse-N2, Neoverse-N1, Cortex-X925, Cortex-X4, Cortex-X3, Cortex…
published 2026-06-09 5 mo ago modified 2026-09-04 2 mo ago also EUVD-2025-210084
- cvss
- 9.1
- version 3.1, CNA
- cisa kev
- Not listed
- not in CISA's catalog
- epss
- 0.5%
- EPSS 0.5% chance of exploitation in 30 days, percentile 45%
- public exploits
- 0
- none known
Summary
Arm C1-Ultra, C1-Premium, Neoverse V3 & V3AE, Neoverse V2, Neoverse V1, Neoverse-N2, Neoverse-N1, Cortex-X925, Cortex-X4, Cortex-X3, Cortex-X2, Cortex-X1 & X1C, Cortex-A710, Cortex-A78, A78AE & A78C, Cortex-A77, Cortex-A76 & A76A may allow writes to resources owned by a higher exception level.
Patch / fix
- Red Hat Red Hat Enterprise Linux 10 0:6.12.0-211.30.1.el10_2
- Red Hat Red Hat Enterprise Linux 10.0 Extended Update Support 0:6.12.0-55.98.1.el10_0
- Red Hat Red Hat Enterprise Linux 8 0:4.18.0-553.140.1.el8_10, 0:4.18.0-553.140.1.rt7.481.el8_10
- Red Hat Red Hat Enterprise Linux 8.4 Advanced Mission Critical Update Support 0:4.18.0-305.200.1.el8_4
- Red Hat Red Hat Enterprise Linux 8.4 Extended Update Support Long-Life Add-On 0:4.18.0-305.200.1.el8_4
- Red Hat Red Hat Enterprise Linux 8.6 Advanced Mission Critical Update Support 0:4.18.0-372.204.1.el8_6
- Red Hat Red Hat Enterprise Linux 8.6 Extended Update Support Long-Life Add-On 0:4.18.0-372.204.1.el8_6
- Red Hat Red Hat Enterprise Linux 8.8 Telecommunications Update Service 0:4.18.0-477.158.1.el8_8
- Red Hat Red Hat Enterprise Linux 8.8 Update Services for SAP Solutions 0:4.18.0-477.158.1.el8_8
- Red Hat Red Hat Enterprise Linux 9 0:5.14.0-687.22.1.el9_8
- Red Hat Red Hat Enterprise Linux 9.2 Update Services for SAP Solutions 0:5.14.0-284.186.1.el9_2, 0:5.14.0-284.186.1.rt14.471.el9_2
- Red Hat Red Hat Enterprise Linux 9.4 Update Services for SAP Solutions 0:5.14.0-427.143.1.el9_4
- Red Hat Red Hat Enterprise Linux 9.6 Extended Update Support 0:5.14.0-570.131.1.el9_6
- Red Hat Red Hat OpenShift Container Platform 4.12 412.86.202608080425-0
- Red Hat Red Hat OpenShift Container Platform 4.13 413.92.202608111330-0
- Red Hat Red Hat OpenShift Container Platform 4.14 414.92.202608172040-0
- Red Hat Red Hat OpenShift Container Platform 4.15 415.92.202608180329-0
- Red Hat Red Hat OpenShift Container Platform 4.16 416.94.202608150307-0
- Red Hat Red Hat OpenShift Container Platform 4.17 417.94.202608250221-0
- Red Hat Red Hat OpenShift Container Platform 4.18 418.94.202608111829-0
- Red Hat Red Hat OpenShift Container Platform 4.19 4.19.9.6.202608120446-0
- Red Hat Red Hat OpenShift Container Platform 4.20 4.20.9.6.202608121719-0
- Red Hat Red Hat OpenShift Container Platform 4.21 4.21.9.6.202608122143-0
- Red Hat Red Hat OpenShift Container Platform 4.22 4.22.9.8.202607152026-0
- xen Debian 12 4.17.7-0+deb12u1
- xen Debian 13 4.20.3+127-gc42374a105-0+deb13u1
- xen Debian 14 4.20.3+127-gc42374a105-1
- linux Debian 12 6.1.176-1
- linux Debian 13 6.12.94-1
- linux Debian 14 7.0.13-1
- arm-trusted-firmware Debian 14 2.12.16+dfsg-1
debian advisories DEBIAN-CVE-2025-10263
- linux Ubuntu 22.04 LTS 5.15.0-194.204
- linux Ubuntu 24.04 LTS 6.8.0-142.142
- linux Ubuntu 26.04 LTS 7.0.0-31.31
- linux-aws Ubuntu 22.04 LTS 5.15.0-1116.123
- linux-aws Ubuntu 24.04 LTS 6.8.0-1065.68
- linux-aws Ubuntu 26.04 LTS 7.0.0-1012.12
- linux-gcp Ubuntu 22.04 LTS 5.15.0-1117.127
- linux-gcp Ubuntu 24.04 LTS 6.8.0-1069.77
ubuntu advisories UBUNTU-CVE-2025-10263
Ubuntu security data © Canonical Ltd., from https://github.com/canonical/ubuntu-security-notices via OSV; changed: normalised to fixed package versions per release. CC BY-SA 4.0
- kernel-rt RHEL 8 4.18.0-553.140.1.rt7.481.el8_10
- kernel-rt-kvm RHEL 8 4.18.0-553.140.1.rt7.481.el8_10
- kernel-rt-core RHEL 8 4.18.0-553.140.1.rt7.481.el8_10
- kernel-rt-modules RHEL 8 4.18.0-553.140.1.rt7.481.el8_10
- kernel-rt-debug-kvm RHEL 8 4.18.0-553.140.1.rt7.481.el8_10
- kernel-rt-debug-core RHEL 8 4.18.0-553.140.1.rt7.481.el8_10
- kernel-rt-debug-modules RHEL 8 4.18.0-553.140.1.rt7.481.el8_10
- kernel-rt-modules-extra RHEL 8 4.18.0-553.140.1.rt7.481.el8_10
red hat advisories RHSA-2026:55445RHSA-2026:52649RHSA-2026:51746RHSA-2026:51603RHSA-2026:51604RHSA-2026:49033
- kernel-rt Linux Micro 6.1, Linux Micro 6.0 6.4.0-51.1
- kernel-source-rt Linux Micro 6.1, Linux Micro 6.0 6.4.0-51.1
- kernel-syms SLES 16.0, Linux Micro Extras 6.2, SLES for SAP applications 16.0 6.12.0-160000.36.1
- kernel-obs-build Linux Micro Extras 6.2 6.12.0-160000.36.1
- kernel-rt Linux Micro 6.2 6.12.0-160000.36.1
- kernel-64kb SLES 16.0, Linux Micro 6.2, SLES for SAP applications 16.0 6.12.0-160000.36.1
- kernel-source SLES 16.0, Linux Micro 6.2, SLES for SAP applications 16.0 6.12.0-160000.36.1
- kernel-default SLES 16.0, SLE High Availability Extension 16.0, Linux Micro 6.2 +1 more 6.12.0-160000.36.1
suse advisories SUSE-SU-2026:23241-1SUSE-SU-2026:23193-1SUSE-SU-2026:22742-1SUSE-SU-2026:22769-1SUSE-SU-2026:22835-1SUSE-SU-2026:22812-1
- kernel-rt openSUSE Leap 16.0 6.12.0-160000.36.1
- dtb-aarch64 openSUSE Leap 16.0 6.12.0-160000.36.1
- kernel-64kb openSUSE Leap 16.0 6.12.0-160000.36.1
- kernel-syms openSUSE Leap 16.0 6.12.0-160000.36.1
- kernel-azure openSUSE Leap 16.0 6.12.0-160000.36.1
- kernel-obs-qa openSUSE Leap 16.0 6.12.0-160000.36.1
- kernel-source openSUSE Leap 16.0 6.12.0-160000.36.1
- kernel-default openSUSE Leap 16.0 6.12.0-160000.36.1
opensuse advisories openSUSE-SU-2026:21388-1
- kernel-rt AlmaLinux 8 4.18.0-553.140.1.rt7.481.el8_10
- kernel-rt-core AlmaLinux 8 4.18.0-553.140.1.rt7.481.el8_10
- kernel-rt-modules AlmaLinux 8 4.18.0-553.140.1.rt7.481.el8_10
- kernel-rt-debug-core AlmaLinux 8 4.18.0-553.140.1.rt7.481.el8_10
- kernel-rt-debug-modules AlmaLinux 8 4.18.0-553.140.1.rt7.481.el8_10
- kernel-rt-modules-extra AlmaLinux 8 4.18.0-553.140.1.rt7.481.el8_10
- kernel-rt-debug-modules-extra AlmaLinux 8 4.18.0-553.140.1.rt7.481.el8_10
- kernel AlmaLinux 8 4.18.0-553.140.1.el8_10
almalinux advisories ALSA-2026:36348ALSA-2026:36349ALSA-2026:36018ALSA-2026:34911
- kernel Rocky Linux 9 5.14.0-687.22.1.el9_8
rocky linux advisories RLSA-2026:36018
- xen Alpine 3.20 4.18.5-r9
- xen Alpine 3.21 4.19.5-r4
- xen Alpine 3.23, Alpine 3.22 4.20.3-r4
- xen Alpine 3.24 4.21.1-r6
alpine advisories ALPINE-CVE-2025-10263
Alpine secdb © Alpine Linux, from https://secdb.alpinelinux.org via OSV; changed: normalised to fixed package versions per release. CC BY-SA 4.0
Vendor advisories
What the vendors themselves say about their products: affected, fixed or not affected, and what to do.
red hat product security vex CVE-2025-10263 updated cvss 8.4
kernel: Arm Processors: Privilege escalation or information disclosure via writes to higher exception level resources
-
Red Hat Enterprise Linux 9 kernel-rt, kernel-rt-kvm, kernel-rt-core, kernel-rt-modules, kernel-rt-debug-kvm, kernel-rt-debug-core, +12 moreaffected: no fix available “Fix deferred”
-
Red Hat Enterprise Linux for NVIDIA 26 kernelaffected: no fix planned “Will not fix”
-
Red Hat OpenShift Container Platform 5 openshift/ose-rhel-coreos-9affected: no fix available
-
Red Hat CodeReady Linux Builder EUS (v.9.6) libperf 5.14.0-570.131.1.el9_6, kernel-debuginfo-common-s390x 5.14.0-570.131.1.el9_6, kernel-debuginfo-common-x86_64 5.14.0-570.131.1.el9_6, kernel-debuginfo-common-aarch64 5.14.0-570.131.1.el9_6, kernel-debuginfo-common-ppc64le 5.14.0-570.131.1.el9_6fixed: vendor fix RHSA-2026:49031
-
Red Hat Enterprise Linux AppStream (v. 9) rv 5.14.0-687.22.1.el9_8, perf 5.14.0-687.22.1.el9_8, rtla 5.14.0-687.22.1.el9_8, python3-perf 5.14.0-687.22.1.el9_8, kernel-devel-matched 5.14.0-687.22.1.el9_8, kernel-64k-devel-matched 5.14.0-687.22.1.el9_8, +7 morefixed: vendor fix RHSA-2026:36018
-
Red Hat Enterprise Linux AppStream (v. 10) rv 6.12.0-211.30.1.el10_2, perf 6.12.0-211.30.1.el10_2, rtla 6.12.0-211.30.1.el10_2, python3-perf 6.12.0-211.30.1.el10_2, kernel-devel-matched 6.12.0-211.30.1.el10_2, kernel-64k-devel-matched 6.12.0-211.30.1.el10_2, +7 morefixed: vendor fix RHSA-2026:34911
-
Red Hat Enterprise Linux AppStream E4S (v.9.2) perf 5.14.0-284.186.1.el9_2, rtla 5.14.0-284.186.1.el9_2, kernel-devel-matched 5.14.0-284.186.1.el9_2, kernel-64k-devel-matched 5.14.0-284.186.1.el9_2, kernel-debug-devel-matched 5.14.0-284.186.1.el9_2, kernel-debuginfo-common-s390x 5.14.0-284.186.1.el9_2, +5 morefixed: vendor fix RHSA-2026:51603
-
Red Hat Enterprise Linux AppStream E4S (v.9.4) rv 5.14.0-427.143.1.el9_4, perf 5.14.0-427.143.1.el9_4, rtla 5.14.0-427.143.1.el9_4, kernel-devel-matched 5.14.0-427.143.1.el9_4, kernel-64k-devel-matched 5.14.0-427.143.1.el9_4, kernel-debug-devel-matched 5.14.0-427.143.1.el9_4, +6 morefixed: vendor fix RHSA-2026:51746
show 32 moreshow fewer
-
Red Hat Enterprise Linux AppStream EUS (v. 10.0) rv 6.12.0-55.98.1.el10_0, perf 6.12.0-55.98.1.el10_0, rtla 6.12.0-55.98.1.el10_0, python3-perf 6.12.0-55.98.1.el10_0, kernel-devel-matched 6.12.0-55.98.1.el10_0, kernel-64k-devel-matched 6.12.0-55.98.1.el10_0, +7 morefixed: vendor fix RHSA-2026:55445
-
Red Hat Enterprise Linux AppStream EUS (v.9.6) rv 5.14.0-570.131.1.el9_6, perf 5.14.0-570.131.1.el9_6, rtla 5.14.0-570.131.1.el9_6, python3-perf 5.14.0-570.131.1.el9_6, kernel-devel-matched 5.14.0-570.131.1.el9_6, kernel-64k-devel-matched 5.14.0-570.131.1.el9_6, +7 morefixed: vendor fix RHSA-2026:49031
-
Red Hat Enterprise Linux BaseOS (v. 8) perf 4.18.0-553.140.1.el8_10, kernel 4.18.0-553.140.1.el8_10, bpftool 4.18.0-553.140.1.el8_10, kernel-core 4.18.0-553.140.1.el8_10, kernel-tools 4.18.0-553.140.1.el8_10, python3-perf 4.18.0-553.140.1.el8_10, +15 morefixed: vendor fix RHSA-2026:36349
-
Red Hat Enterprise Linux BaseOS (v. 9) kernel 5.14.0-687.22.1.el9_8, kernel-64k 5.14.0-687.22.1.el9_8, kernel-core 5.14.0-687.22.1.el9_8, kernel-tools 5.14.0-687.22.1.el9_8, kernel-modules 5.14.0-687.22.1.el9_8, kernel-64k-core 5.14.0-687.22.1.el9_8, +27 morefixed: vendor fix RHSA-2026:36018
-
Red Hat Enterprise Linux BaseOS (v. 10) kernel 6.12.0-211.30.1.el10_2, kernel-64k 6.12.0-211.30.1.el10_2, kernel-core 6.12.0-211.30.1.el10_2, kernel-tools 6.12.0-211.30.1.el10_2, kernel-modules 6.12.0-211.30.1.el10_2, kernel-64k-core 6.12.0-211.30.1.el10_2, +28 morefixed: vendor fix RHSA-2026:34911
-
Red Hat Enterprise Linux BaseOS AUS (v.8.4) perf 4.18.0-305.200.1.el8_4, kernel 4.18.0-305.200.1.el8_4, bpftool 4.18.0-305.200.1.el8_4, kernel-core 4.18.0-305.200.1.el8_4, kernel-tools 4.18.0-305.200.1.el8_4, python3-perf 4.18.0-305.200.1.el8_4, +8 morefixed: vendor fix RHSA-2026:47248
-
Red Hat Enterprise Linux BaseOS AUS (v.8.6) perf 4.18.0-372.204.1.el8_6, kernel 4.18.0-372.204.1.el8_6, bpftool 4.18.0-372.204.1.el8_6, kernel-core 4.18.0-372.204.1.el8_6, kernel-tools 4.18.0-372.204.1.el8_6, python3-perf 4.18.0-372.204.1.el8_6, +8 morefixed: vendor fix RHSA-2026:49033
-
Red Hat Enterprise Linux BaseOS E4S (v.8.8) perf 4.18.0-477.158.1.el8_8, kernel 4.18.0-477.158.1.el8_8, bpftool 4.18.0-477.158.1.el8_8, kernel-core 4.18.0-477.158.1.el8_8, kernel-tools 4.18.0-477.158.1.el8_8, python3-perf 4.18.0-477.158.1.el8_8, +9 morefixed: vendor fix RHSA-2026:52649
-
Red Hat Enterprise Linux BaseOS E4S (v.9.2) bpftool 7.0.0-284.186.1.el9_2, kernel 5.14.0-284.186.1.el9_2, kernel-64k 5.14.0-284.186.1.el9_2, kernel-core 5.14.0-284.186.1.el9_2, kernel-tools 5.14.0-284.186.1.el9_2, python3-perf 5.14.0-284.186.1.el9_2, +28 morefixed: vendor fix RHSA-2026:51603
-
Red Hat Enterprise Linux BaseOS E4S (v.9.4) bpftool 7.3.0-427.143.1.el9_4, kernel 5.14.0-427.143.1.el9_4, kernel-64k 5.14.0-427.143.1.el9_4, kernel-core 5.14.0-427.143.1.el9_4, kernel-tools 5.14.0-427.143.1.el9_4, python3-perf 5.14.0-427.143.1.el9_4, +28 morefixed: vendor fix RHSA-2026:51746
-
Red Hat Enterprise Linux BaseOS EUS (v. 10.0) kernel 6.12.0-55.98.1.el10_0, kernel-64k 6.12.0-55.98.1.el10_0, kernel-core 6.12.0-55.98.1.el10_0, kernel-tools 6.12.0-55.98.1.el10_0, kernel-modules 6.12.0-55.98.1.el10_0, kernel-64k-core 6.12.0-55.98.1.el10_0, +27 morefixed: vendor fix RHSA-2026:55445
-
Red Hat Enterprise Linux BaseOS EUS (v.9.6) kernel 5.14.0-570.131.1.el9_6, kernel-64k 5.14.0-570.131.1.el9_6, kernel-core 5.14.0-570.131.1.el9_6, kernel-tools 5.14.0-570.131.1.el9_6, kernel-modules 5.14.0-570.131.1.el9_6, kernel-64k-core 5.14.0-570.131.1.el9_6, +27 morefixed: vendor fix RHSA-2026:49031
-
Red Hat Enterprise Linux BaseOS EUS EXTENSION (v.8.4) perf 4.18.0-305.200.1.el8_4, kernel 4.18.0-305.200.1.el8_4, bpftool 4.18.0-305.200.1.el8_4, kernel-core 4.18.0-305.200.1.el8_4, kernel-tools 4.18.0-305.200.1.el8_4, python3-perf 4.18.0-305.200.1.el8_4, +8 morefixed: vendor fix RHSA-2026:47248
-
Red Hat Enterprise Linux BaseOS EUS EXTENSION (v.8.6) perf 4.18.0-372.204.1.el8_6, kernel 4.18.0-372.204.1.el8_6, bpftool 4.18.0-372.204.1.el8_6, kernel-core 4.18.0-372.204.1.el8_6, kernel-tools 4.18.0-372.204.1.el8_6, python3-perf 4.18.0-372.204.1.el8_6, +8 morefixed: vendor fix RHSA-2026:49033
-
Red Hat Enterprise Linux BaseOS TUS (v.8.8) perf 4.18.0-477.158.1.el8_8, kernel 4.18.0-477.158.1.el8_8, bpftool 4.18.0-477.158.1.el8_8, kernel-core 4.18.0-477.158.1.el8_8, kernel-tools 4.18.0-477.158.1.el8_8, python3-perf 4.18.0-477.158.1.el8_8, +8 morefixed: vendor fix RHSA-2026:52649
-
Red Hat Enterprise Linux CodeReady Linux Builder (v. 9) libperf 5.14.0-687.22.1.el9_8, kernel-debuginfo-common-s390x 5.14.0-687.22.1.el9_8, kernel-debuginfo-common-x86_64 5.14.0-687.22.1.el9_8, kernel-debuginfo-common-aarch64 5.14.0-687.22.1.el9_8, kernel-debuginfo-common-ppc64le 5.14.0-687.22.1.el9_8fixed: vendor fix RHSA-2026:36018
-
Red Hat Enterprise Linux CodeReady Linux Builder (v. 10) libperf 6.12.0-211.30.1.el10_2, kernel-debuginfo-common-s390x 6.12.0-211.30.1.el10_2, kernel-debuginfo-common-x86_64 6.12.0-211.30.1.el10_2, kernel-debuginfo-common-aarch64 6.12.0-211.30.1.el10_2, kernel-debuginfo-common-ppc64le 6.12.0-211.30.1.el10_2fixed: vendor fix RHSA-2026:34911
-
Red Hat Enterprise Linux CodeReady Linux Builder EUS (v. 10.0) libperf 6.12.0-55.98.1.el10_0, kernel-debuginfo-common-s390x 6.12.0-55.98.1.el10_0, kernel-debuginfo-common-x86_64 6.12.0-55.98.1.el10_0, kernel-debuginfo-common-aarch64 6.12.0-55.98.1.el10_0, kernel-debuginfo-common-ppc64le 6.12.0-55.98.1.el10_0fixed: vendor fix RHSA-2026:55445
-
Red Hat Enterprise Linux CRB (v. 8) kernel-debuginfo-common-x86_64 4.18.0-553.140.1.el8_10, kernel-debuginfo-common-aarch64 4.18.0-553.140.1.el8_10, kernel-debuginfo-common-ppc64le 4.18.0-553.140.1.el8_10fixed: vendor fix RHSA-2026:36349
-
Red Hat Enterprise Linux NFV (v. 8) kernel-rt 4.18.0-553.140.1.rt7.481.el8_10, kernel-rt-kvm 4.18.0-553.140.1.rt7.481.el8_10, kernel-rt-core 4.18.0-553.140.1.rt7.481.el8_10, kernel-rt-modules 4.18.0-553.140.1.rt7.481.el8_10, kernel-rt-debug-kvm 4.18.0-553.140.1.rt7.481.el8_10, kernel-rt-debug-core 4.18.0-553.140.1.rt7.481.el8_10, +4 morefixed: vendor fix RHSA-2026:36348
-
Red Hat Enterprise Linux Real Time (v. 9) kernel-rt 5.14.0-687.22.1.el9_8, kernel-rt-64k 5.14.0-687.22.1.el9_8, kernel-rt-core 5.14.0-687.22.1.el9_8, kernel-rt-modules 5.14.0-687.22.1.el9_8, kernel-rt-64k-core 5.14.0-687.22.1.el9_8, kernel-rt-debug-core 5.14.0-687.22.1.el9_8, +14 morefixed: vendor fix RHSA-2026:36018
-
Red Hat Enterprise Linux Real Time (v. 10) kernel-rt 6.12.0-211.30.1.el10_2, kernel-rt-64k 6.12.0-211.30.1.el10_2, kernel-rt-core 6.12.0-211.30.1.el10_2, kernel-rt-modules 6.12.0-211.30.1.el10_2, kernel-rt-64k-core 6.12.0-211.30.1.el10_2, kernel-rt-debug-core 6.12.0-211.30.1.el10_2, +14 morefixed: vendor fix RHSA-2026:34911
-
Red Hat Enterprise Linux Real Time E4S (v.9.2) kernel-rt 5.14.0-284.186.1.rt14.471.el9_2, kernel-rt-core 5.14.0-284.186.1.rt14.471.el9_2, kernel-rt-modules 5.14.0-284.186.1.rt14.471.el9_2, kernel-rt-debug-core 5.14.0-284.186.1.rt14.471.el9_2, kernel-rt-modules-core 5.14.0-284.186.1.rt14.471.el9_2, kernel-rt-debug-modules 5.14.0-284.186.1.rt14.471.el9_2, +4 morefixed: vendor fix RHSA-2026:51604
-
Red Hat Enterprise Linux Real Time E4S (v.9.4) kernel-rt 5.14.0-427.143.1.el9_4, kernel-rt-core 5.14.0-427.143.1.el9_4, kernel-rt-modules 5.14.0-427.143.1.el9_4, kernel-rt-debug-core 5.14.0-427.143.1.el9_4, kernel-rt-modules-core 5.14.0-427.143.1.el9_4, kernel-rt-debug-modules 5.14.0-427.143.1.el9_4, +4 morefixed: vendor fix RHSA-2026:51746
-
Red Hat Enterprise Linux Real Time EUS (v. 10.0) kernel-rt 6.12.0-55.98.1.el10_0, kernel-rt-64k 6.12.0-55.98.1.el10_0, kernel-rt-core 6.12.0-55.98.1.el10_0, kernel-rt-modules 6.12.0-55.98.1.el10_0, kernel-rt-64k-core 6.12.0-55.98.1.el10_0, kernel-rt-debug-core 6.12.0-55.98.1.el10_0, +14 morefixed: vendor fix RHSA-2026:55445
-
Red Hat Enterprise Linux Real Time EUS (v.9.6) kernel-rt 5.14.0-570.131.1.el9_6, kernel-rt-64k 5.14.0-570.131.1.el9_6, kernel-rt-core 5.14.0-570.131.1.el9_6, kernel-rt-modules 5.14.0-570.131.1.el9_6, kernel-rt-64k-core 5.14.0-570.131.1.el9_6, kernel-rt-debug-core 5.14.0-570.131.1.el9_6, +14 morefixed: vendor fix RHSA-2026:49031
-
Red Hat Enterprise Linux Real Time for NFV (v. 9) kernel-rt 5.14.0-687.22.1.el9_8, kernel-rt-core 5.14.0-687.22.1.el9_8, kernel-rt-modules 5.14.0-687.22.1.el9_8, kernel-rt-debug-core 5.14.0-687.22.1.el9_8, kernel-rt-modules-core 5.14.0-687.22.1.el9_8, kernel-rt-debug-modules 5.14.0-687.22.1.el9_8, +4 morefixed: vendor fix RHSA-2026:36018
-
Red Hat Enterprise Linux Real Time for NFV (v. 10) kernel-rt 6.12.0-211.30.1.el10_2, kernel-rt-core 6.12.0-211.30.1.el10_2, kernel-rt-modules 6.12.0-211.30.1.el10_2, kernel-rt-debug-core 6.12.0-211.30.1.el10_2, kernel-rt-modules-core 6.12.0-211.30.1.el10_2, kernel-rt-debug-modules 6.12.0-211.30.1.el10_2, +4 morefixed: vendor fix RHSA-2026:34911
-
Red Hat Enterprise Linux Real Time for NFV E4S (v.9.2) kernel-rt 5.14.0-284.186.1.rt14.471.el9_2, kernel-rt-kvm 5.14.0-284.186.1.rt14.471.el9_2, kernel-rt-core 5.14.0-284.186.1.rt14.471.el9_2, kernel-rt-modules 5.14.0-284.186.1.rt14.471.el9_2, kernel-rt-debug-kvm 5.14.0-284.186.1.rt14.471.el9_2, kernel-rt-debug-core 5.14.0-284.186.1.rt14.471.el9_2, +6 morefixed: vendor fix RHSA-2026:51604
-
Red Hat Enterprise Linux Real Time for NFV E4S (v.9.4) kernel-rt 5.14.0-427.143.1.el9_4, kernel-rt-kvm 5.14.0-427.143.1.el9_4, kernel-rt-core 5.14.0-427.143.1.el9_4, kernel-rt-modules 5.14.0-427.143.1.el9_4, kernel-rt-debug-kvm 5.14.0-427.143.1.el9_4, kernel-rt-debug-core 5.14.0-427.143.1.el9_4, +6 morefixed: vendor fix RHSA-2026:51746
-
Red Hat Enterprise Linux Real Time for NFV EUS (v. 10.0) kernel-rt 6.12.0-55.98.1.el10_0, kernel-rt-kvm 6.12.0-55.98.1.el10_0, kernel-rt-core 6.12.0-55.98.1.el10_0, kernel-rt-modules 6.12.0-55.98.1.el10_0, kernel-rt-debug-kvm 6.12.0-55.98.1.el10_0, kernel-rt-debug-core 6.12.0-55.98.1.el10_0, +6 morefixed: vendor fix RHSA-2026:55445
-
Red Hat Enterprise Linux Real Time for NFV EUS (v.9.6) kernel-rt 5.14.0-570.131.1.el9_6, kernel-rt-kvm 5.14.0-570.131.1.el9_6, kernel-rt-core 5.14.0-570.131.1.el9_6, kernel-rt-modules 5.14.0-570.131.1.el9_6, kernel-rt-debug-kvm 5.14.0-570.131.1.el9_6, kernel-rt-debug-core 5.14.0-570.131.1.el9_6, +6 morefixed: vendor fix RHSA-2026:49031
12 more fixed, 3 more not affected in the full advisory
Red Hat CSAF VEX © Red Hat, Inc., from https://security.access.redhat.com/data/csaf/v2/vex/; changed: reduced to product statuses and remediations. CC BY 4.0 · csaf
CISA SSVC
- Exploitation
- none
- Automatable
- yes
- Technical impact
- total
- Assessed
- 5 mo ago
Exploit prediction
0.54% chance of exploitation in the next 30 days, higher than 45% of all scored CVEs (FIRST EPSS, 2026-11-08).
CVSS scores
| assigned by | version | score | vector |
|---|---|---|---|
| CISA ADP | 3.1 | 9.1 | CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N |
| CISA ADP | 3.1 | 8.4 | CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:N |
| CNA | 3.1 | 9.1 | CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N |
| CNA | 3.1 | 8.4 | CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:N |
Affected products
- Arm C1-Ultra
- Arm C1-Premium
- Arm Neoverse V3
- Arm Neoverse V3AE
- Arm Neoverse V1
- Arm Neoverse N2
- Arm Neoverse N1
- Arm Cortex-X925
- Arm Cortex-X4
- Arm Cortex-X3
- Arm Cortex-X2
- Arm Cortex-X1
- Arm Cortex-X1C
- Arm Cortex-A710
- Arm Cortex-A78
- Arm Cortex-A78AE
- Arm Cortex-A78C
- Arm Cortex-A77
- Arm Cortex-A76
- Arm Cortex-A76AE
- Red Hat Red Hat Enterprise Linux 10
- Red Hat Red Hat Enterprise Linux 10.0 Extended Update Support
- Red Hat Red Hat Enterprise Linux 8
- Red Hat Red Hat Enterprise Linux 8.4 Advanced Mission Critical Update Support
- Red Hat Red Hat Enterprise Linux 8.4 Extended Update Support Long-Life Add-On
- Red Hat Red Hat Enterprise Linux 8.6 Advanced Mission Critical Update Support
- Red Hat Red Hat Enterprise Linux 8.6 Extended Update Support Long-Life Add-On
- Red Hat Red Hat Enterprise Linux 8.8 Telecommunications Update Service
- Red Hat Red Hat Enterprise Linux 8.8 Update Services for SAP Solutions
- Red Hat Red Hat Enterprise Linux 9
- Red Hat Red Hat Enterprise Linux 9.2 Update Services for SAP Solutions
- Red Hat Red Hat Enterprise Linux 9.4 Update Services for SAP Solutions
- Red Hat Red Hat Enterprise Linux 9.6 Extended Update Support
- Red Hat Red Hat OpenShift Container Platform 4.12
- Red Hat Red Hat OpenShift Container Platform 4.13
- Red Hat Red Hat OpenShift Container Platform 4.14
- Red Hat Red Hat OpenShift Container Platform 4.15
- Red Hat Red Hat OpenShift Container Platform 4.16
- Red Hat Red Hat OpenShift Container Platform 4.17
- Red Hat Red Hat OpenShift Container Platform 4.18
- Red Hat Red Hat OpenShift Container Platform 4.19
- Red Hat Red Hat OpenShift Container Platform 4.20
- Red Hat Red Hat OpenShift Container Platform 4.21
- Red Hat Red Hat OpenShift Container Platform 4.22
- Red Hat Red Hat Enterprise Linux 6
- Red Hat Red Hat Enterprise Linux 7
- Red Hat Red Hat Enterprise Linux for NVIDIA 26
- Red Hat Red Hat OpenShift Container Platform 4
Classification
References
-
access.redhat.com
/errata/RHSA-2026:54205
vendor-advisory
-
access.redhat.com
/errata/RHSA-2026:54187
vendor-advisory
-
access.redhat.com
/errata/RHSA-2026:56786
vendor-advisory
-
access.redhat.com
/errata/RHSA-2026:56911
vendor-advisory
-
access.redhat.com
/errata/RHSA-2026:56853
vendor-advisory
-
access.redhat.com
/errata/RHSA-2026:60019
vendor-advisory
-
access.redhat.com
/errata/RHSA-2026:54544
vendor-advisory
-
access.redhat.com
/errata/RHSA-2026:54553
vendor-advisory
-
access.redhat.com
/errata/RHSA-2026:54581
vendor-advisory
-
access.redhat.com
/errata/RHSA-2026:54599
vendor-advisory
-
access.redhat.com
/errata/RHSA-2026:40764
vendor-advisory
-
access.redhat.com
/errata/RHSA-2026:55445
vendor-advisory
-
access.redhat.com
/errata/RHSA-2026:34911
vendor-advisory
-
access.redhat.com
/errata/RHSA-2026:51603
vendor-advisory
-
access.redhat.com
/errata/RHSA-2026:51746
vendor-advisory
-
access.redhat.com
/errata/RHSA-2026:49031
vendor-advisory
-
access.redhat.com
/errata/RHSA-2026:36018
vendor-advisory
-
access.redhat.com
/errata/RHSA-2026:36349
vendor-advisory
-
access.redhat.com
/errata/RHSA-2026:47248
vendor-advisory
-
access.redhat.com
/errata/RHSA-2026:49033
vendor-advisory
-
access.redhat.com
/errata/RHSA-2026:52649
vendor-advisory
-
access.redhat.com
/errata/RHSA-2026:36348
vendor-advisory
-
access.redhat.com
/errata/RHSA-2026:51604
vendor-advisory
- developer.arm.com /documentation/112137
- xenbits.xen.org /xsa/advisory-493.html
- openwall.com /lists/oss-security/2026/06/09/13
-
access.redhat.com
/security/cve/CVE-2025-10263
vdb-entry
-
bugzilla.redhat.com
/show_bug.cgi?id=2486958
issue-tracking
- security.access.redhat.com /data/csaf/v2/vex/2025/cve-2025-10263.json
Sources
- CVE List CVE-2025-10263
- NVD CVE-2025-10263
Fencer Vulns keeps one entry per vulnerability: the CVE id wins, then GHSA, and records that alias each other are merged, except that two CVEs always keep separate entries. The same data is available as JSON.