// Google CloudMEDIUM
CVE-2025-0647 affects select Arm processors (Neoverse and Cortex series) used in Google Cloud Compute Engine Arm VMs (C4A, A4X instances). A vulnerability in the CPP RCTX instruction allows attackers with privileged guest kernel access to inhibit TLB invalidations, potentially enabling unauthorized reading of sensitive data. Google has already applied mitigations to the affected Arm server fleet; no customer action is required.
// Get alerts for Google Cloud