Patchwire CVEs, their patch status, and feeds to follow them

CVE-2026-0995

Fixed in a distro release EPSS <1%CVSS 3.6

An issue has been identified in Arm C1-Pro before r1p2-50eac0, where, under certain conditions, a TLBI+DSB might fail to ensure the completion of memory accesses related to SME.

Published 2026-03-02 · CVE record · OSV

Products: Arm C1-Pro

Distro releases

ReleasePackageFixed in
Debian 12arm-trusted-firmwareno fix
Debian 13arm-trusted-firmwareno fix
Debian 14arm-trusted-firmware2.12.16+dfsg-1