PT-2025-46349 · Arm · Cortex

Published 2025-11-11 · Updated 2025-11-12 · CVE-2025-9408

Positive Technologies (AI Summary)

CVSS v3.1

8.1

High

Base vector

AV:L/AC:H/PR:N/UI:N/S:C/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions versions prior to 2025-9408

Description A race condition exists during system call entry on Cortex M processors, potentially allowing privilege escalation for malicious user space processes. It is possible this issue may also affect Cortex R and A processors, but this is unconfirmed.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

LPE

Weakness Enumeration

CWE-270

Related Identifiers

CVE-2025-9408

GHSA-3R6J-5MP3-75WR

Affected Products

Cortex

References · 4

• https://osv.dev/vulnerability/CVE-2025-9408 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2025-9408 · Security Note
• https://github.com/zephyrproject-rtos/zephyr/security/advisories/GHSA-3r6j-5mp3-75wr · Note
• https://twitter.com/CVEnew/status/1988452665089814938 · Twitter Post