CVE-2026-0995
Fixed in a distro release EPSS <1%CVSS 3.6
An issue has been identified in Arm C1-Pro before r1p2-50eac0, where, under certain conditions, a TLBI+DSB might fail to ensure the completion of memory accesses related to SME.
Products: Arm C1-Pro
Distro releases
| Release | Package | Fixed in |
|---|---|---|
| Debian 12 | arm-trusted-firmware | no fix |
| Debian 13 | arm-trusted-firmware | no fix |
| Debian 14 | arm-trusted-firmware | 2.12.16+dfsg-1 |