software/arm-trusted-firmware.git/lib/cpus/aarch64/c1_ultra.S, branch master

chore(cpus): update developer.arm.com links to support.arm.com

2026-09-07T08:32:51+00:00

This is the new canonical place to find CPU related documentation. Change-Id: I69d13bd8bdf99b8404b3dc78164e057d4e1f2c35 Signed-off-by: Boyan Karatotev

feat(cpus): add links to each core's TRM and SDEN

2026-08-20T06:52:51+00:00

To do anything with a core you need either its TRM or SDEN (or both if working around errata). There is no simple way to download the latest of either of these documents in bulk so finding and downloading these documents is a big (and somewhat annoying) part of maintaining core drivers. This patch tries to alleviate this problem by adding links to both of these documents in a standard format within each CPU driver. A convenient side effect is that this makes automation around them possible. Change-Id: I6fe089876aa2d764a67733041751202e2bd3c350 Signed-off-by: Boyan Karatotev

docs(cpus): add erratum 4015814 comments

2026-08-17T16:31:41+00:00

C1-Ultra erratum 4015814 can prevent an external debugger from accessing memory-mapped debug registers when MDCR_EL3.ETADE, EDADE, or EPMADE are set while FEAT_RME is not implemented or enabled. Document that the generic MDCR_EL3 initialization leaves these fields clear, avoiding the erratum. Register the erratum as always chosen for the affected C1-Ultra revisions. This is documentation only; no C1-Ultra-specific workaround is required. SDEN documentation: https://support.arm.com/documentation/111077/latest Change-Id: I899d1c54cf152159e494a73f7fa962eab32d4d1d Signed-off-by: Matthew Ellis

docs(xlat): add erratum 3683289 comments

2026-08-17T16:31:33+00:00

C1 Ultra erratum 3683289 can be triggered when software managing translation tables misprograms the contiguous hint, or replaces an existing block mapping with a different mapping without following break-before-make and TLB invalidation requirements. Add comments to the xlat v2 code documenting the invariants that prevent those conditions in TF-A: - xlat v2 does not set the contiguous hint. - dynamic mappings only create entries where the descriptor is invalid. - dynamic mappings do not overwrite existing block/page descriptors. - unmap and attribute-change paths invalidate descriptors before TLB invalidation, with the attribute-change path using break-before-make. This is documentation only; no C1 Ultra-specific workaround is required. SDEN documentation: https://support.arm.com/documentation/111077/latest Change-Id: Idb4a6f864967b25b5187dd882fb47abfa2bc4605 Signed-off-by: Matthew Ellis LTS-candidate: yes

fix(cpus): use #ifdef for IMAGE_BL flags

2026-06-22T16:51:10+00:00

The different flags IMAGE_BL{1,2,31,32...} are only defined and not assigned a value. The correct way to handle it is with `#if defined`. This corrects warnings found with -Wundef GCC flag. Change-Id: I5a4e2acdd007ba56039b992bde77d2a9400301cd Signed-off-by: Yann Gautier

fix: workaround for CVE-2025-10263

2026-06-11T15:36:54+00:00

This patch applies the workaround for CVE-2025-10263 to Arm Trusted Firmware in EL3. The issue can occur when a shareable TLBI is followed by a DSB instruction, and the workaround is to insert an additional shareable TLBI followed by a DSB. This issue is a little bit unique in that if even a single core in a system is affected, then all cores must perform the workaround. The build flag defaults to zero but must be set to 1 in the platform makefile of any affected platform. This first iteration of the patch does not touch the GPT library code since it is not currently used in any production hardware. Disclosure: https://developer.arm.com/documentation/112137 Change-Id: Id4c0acee41a40a9fbf780792153e5ef328ba8807 Signed-off-by: John Powell

fix(cpus)!: make ERRATA_SME_POWER_DOWN work with the recommended state ID

2026-03-25T10:27:26+00:00

The ERRATA_SME_POWER_DOWN flag doesn't account for the recommended state ID encoding, only for the default one. This patch makes it work by removing the generic flag and incorporating the functionality into the CPU and platform layers. The ERRATA_SME_POWER_DOWN is an awkward fix in generic code to a platform problem. The PSCI layer shouldn't care about any CPU's inner workings but it does. This isn't ideal once the issue is fixed since we'll have to carry the "legacy" fix in generic code. This patch is marked as breaking since the ERRATA_SME_POWER_DOWN flag is removed and a couple of lines are required if CPU hotplug encounters a powerdown with live SME state (CPU suspend will work as before). This will get discovered with a panic at EL3 so this patch leaves a comment to be able to trace it back. Change-Id: Ia52865f527e81a8be3727093ed370901e55c5fef Signed-off-by: Boyan Karatotev

fix(security): avoid CVE_2025_0647 for bl2 build

2026-02-19T16:49:05+00:00

If a platform defines the flag RESET_TO_BL2, BL2 will include the CPU library files. If the CPU is Armv8.5 or higher, the workaround flag WORKAROUND_CVE_2025_0647 will be enable. And then there are compilation issues, as some symbols from wa_cve_2025_0647_cpprctx.S are not found. This has been seen on lts-v2.12 branch when preparing lts-v2.12.11 tag. The platform RD1AE failed to compiled. To fix this issue add the workaround only for BL31 image build, this is similar to `override_vector_table` already done in parts of cpu lib. Change-Id: Icdf63de6ed8413761561406eceaeddd69118b144 Signed-off-by: Yann Gautier Signed-off-by: Govindraj Raja

fix(cpus): remove C1-Ultra erratum 3651221

2026-01-27T20:04:21+00:00

This erratum workaround is already implemented as part of CVE-2024-7881 [1] and is redundant. This patch removes C1-Ultra erratum 3651221 [2] support. [1] : https://developer.arm.com/documentation/110326/latest/ [2] : https://developer.arm.com/documentation/111077/latest/ Signed-off-by: Arvind Ram Prakash Change-Id: If7ea433e4614f92333e788e3f6b366db22c92f0d

fix(security): add CVE-2025-0647 for C1-Ultra

2026-01-23T21:14:36+00:00

This patch mitigates CVE-2025-0647 for C1-Ultra CPU. Arm Security Bulletin Document: https://developer.arm.com/documentation/111546 Change-Id: I506007ec8702b183e377be50eede72d6803b344b Signed-off-by: Govindraj Raja Signed-off-by: John Powell