CVE-2026-0995: Arm c1-Pro Firmware

Low severity, CVSS 3.6. EPSS: 0.1% chance of exploitation in the next 30 days.

An issue has been identified in Arm C1-Pro before r1p2-50eac0, where, under certain conditions, a TLBI+DSB might fail to ensure the completion of memory accesses related to SME.

Affected products

• Arm c1-Pro Firmware: before r1p2-50eac0 (fixed in r1p2-50eac0)

Published 2026-03-02. Last modified 2026-06-17.