Fluid Attacks Database

Description

An issue has been identified in Arm C1-Pro before r1p2-50eac0, where, under certain conditions, a TLBI+DSB might fail to ensure the completion of memory accesses related to SME.

Mitigation

Update Impact

Minimal update. May introduce new vulnerabilities or breaking changes.

Ecosystem	Component	Affected version
debian 12	arm-trusted-firmware	=2.10.0+dfsg-1 \|\| =2.10.10+dfsg-1 \|\| =2.12.0+dfsg-1 \|\| =2.12.0+dfsg-2 \|\| =2.12.1+dfsg-1 \|\| =2.12.16+dfsg-1 \|\| =2.8.0+dfsg-1 \|\| =2.9.0+dfsg-1 \|\| =2.9.0+dfsg-2 \|\| =2.9.0+dfsg-3
debian 13	arm-trusted-firmware	=2.12.1+dfsg-1 \|\| =2.12.16+dfsg-1
debian 14	arm-trusted-firmware	=2.12.1+dfsg-1 \|\| =2.12.16+dfsg-1

Aliases

1. CVE-2026-09952. NVD-2026-09953. OSV-DEBIAN-2026-09954. OSV-2026-09955. SECURITY-TRACKER-CVE-2026-0995

Does your application use this vulnerable software?

During the free trial, our tools assess your application, identify vulnerabilities, and provide recommendations for their remediation.