Red Hat Patches Arm Kernel Flaw Enabling Privilege Escalation and VM Escape

Red Hat disclosed and remediated CVE-2025-10263, an Important Linux kernel flaw affecting multiple Arm processor families, including Cortex, Neoverse, and C1 lines. The bug stems from a race condition in TLBI operations during memory permission changes and can let a low-privileged local attacker write to memory owned by a higher exception level, leading to kernel privilege escalation, information disclosure, or even guest-to-hypervisor escape. Red Hat scored the issue CVSS 8.4 and linked it to CWE-266.

Fixes were rolled out across a broad set of Red Hat products, including RHEL 8, 9, and 10 kernel packages and OpenShift Container Platform 4.22.6. Advisories such as RHSA-2026:51746 for RHEL 9.4 SAP-related variants and RHSA-2026:55445 for RHEL 10.0 Extended Update Support included CVE-2025-10263 alongside other kernel vulnerabilities, while RHSA-2026:40764 delivered OpenShift updates covering the same issue. Red Hat said affected systems should be updated promptly and rebooted after applying the new kernel packages.