Hafnium
2.15.0
Home
1. About
1.1. Active Maintainers
2. Getting Started
2.1. Prerequisites
2.1.1. Build Host
2.1.2. Toolchain
2.1.3. Dependencies
2.1.3.1. Build
2.1.3.2. System and Python Packages for test infrastructure
2.1.3.3. Documentation
2.2. Getting the source code
2.3. Building
2.3.1. Hafnium
2.3.1.1. Most common options
2.3.1.2. Additional options
2.3.1.3. Troubleshoot(Clean Up Artifacts)
2.3.2. Using Docker
2.3.3. Hafnium Documentation
2.4. Project Structure
2.5. Hafnium Tests
2.5.1. Overview of Shrinkwrap for Hafnium Testing
2.5.2. Shrinkwrap Integration in hftest.py
2.5.3. Manual Shrinkwrap Environment Setup
2.5.4. Shrinkwrap at the Core of the hftest Framework
2.5.4.1. Overlay Structure
2.5.5. Testing Hafnium with TFTF
3. Processes & Policies
3.1. Coding Style
3.1.1. Clarifications
3.1.2. Naming symbols
3.1.3. Prose
3.1.4. Coding practices
3.1.5. Logging
3.2. Commits Style
3.2.1. Mandated Trailers
3.2.2. Commit Linting
3.3. Security Handling
3.3.1. Security Disclosures
3.3.2. Found a Security Issue?
3.3.3. Attribution
3.3.4. Security Advisories
4. Secure Partition Manager
4.1. Foreword
4.2. Terminology
4.3. Sample reference stack
4.4. Integration with TF-A (Bootloader and SPMD)
4.4.1. TF-A build options
4.4.2. FVP model invocation
4.5. SPMC Configuration
4.5.1. SPMC Manifest
4.5.2. Secure Partitions Configuration
4.5.2.1. SP Manifests
4.5.2.2. Platform topology
4.5.2.3. Secure Partition packages
4.5.2.4. Secure Partitions Layout File
4.6. SPMC boot
4.6.1. Secure boot
4.6.2. Boot phases
4.6.2.1. Primary core boot-up
4.6.2.2. Secondary cores boot-up
4.6.3. Loading of SPs
4.6.3.1. SP Boot order
4.6.3.2. Passing boot data to the SP
4.7. SPMC Runtime
4.7.1. Parsing SP partition manifests
4.7.2. Secure partitions scheduling
4.7.3. Mandatory interfaces
4.7.3.1. FFA_VERSION
4.7.3.2. FFA_FEATURES
4.7.3.3. FFA_RXTX_MAP/FFA_RXTX_UNMAP
4.7.3.4. FFA_PARTITION_INFO_GET/FFA_PARTITION_INFO_GET_REGS
4.7.3.5. FFA_ID_GET
4.7.3.6. FFA_MSG_WAIT
4.7.3.7. FFA_MSG_SEND_DIRECT_REQ/FFA_MSG_SEND_DIRECT_RESP
4.7.3.8. FFA_MSG_SEND_DIRECT_REQ2/FFA_MSG_SEND_DIRECT_RESP2
4.7.3.9. FFA_NOTIFICATION_BITMAP_CREATE/FFA_NOTIFICATION_BITMAP_DESTROY
4.7.3.10. FFA_NOTIFICATION_BIND/FFA_NOTIFICATION_UNBIND
4.7.3.11. FFA_NOTIFICATION_SET/FFA_NOTIFICATION_GET
4.7.3.12. FFA_NOTIFICATION_INFO_GET
4.7.3.13. FFA_SPM_ID_GET
4.7.3.14. FFA_SECONDARY_EP_REGISTER
4.7.3.15. FFA_RX_ACQUIRE/FFA_RX_RELEASE
4.7.3.16. FFA_MSG_SEND2
4.7.3.17. FFA_CONSOLE_LOG
4.7.4. Paravirtualized interfaces
4.7.4.1. HF_INTERRUPT_ENABLE
4.7.4.2. HF_INTERRUPT_GET
4.7.4.3. HF_INTERRUPT_DEACTIVATE
4.7.4.4. HF_INTERRUPT_RECONFIGURE
4.7.4.5. HF_INTERRUPT_SEND_IPI
4.7.5. SPMC-SPMD direct requests/responses
4.7.6. Notifications
4.7.7. Memory Sharing
4.7.8. PE MMU configuration
4.7.9. Schedule modes and SP Call chains
4.7.10. Partition runtime models
4.7.11. Interrupt management
4.7.11.1. GIC ownership
4.7.11.2. Non-secure interrupt handling
4.7.11.3. Secure interrupt handling
4.7.11.4. Secure interrupt signaling mechanisms
4.7.11.5. Secure Interrupt Handling policy
4.7.11.6. Secure interrupt completion mechanisms
4.7.11.7. Actions for a secure interrupt triggered while execution is in normal world
4.7.11.8. Actions for a secure interrupt triggered while execution is in secure world
4.7.11.9. EL3 interrupt handling
4.7.11.10. Inter-Processor Interrupts
4.7.12. Power management
4.7.13. Arm architecture extensions for security hardening
4.7.14. SIMD support
4.7.14.1. Supported configurations
4.7.14.2. SIMD save/restore operations
4.7.15. SMMUv3 support in Hafnium
4.7.15.1. SMMUv3 features
4.7.15.2. SMMUv3 Programming Interfaces
4.7.15.3. Peripheral device manifest
4.7.16. DMA isolation
4.7.16.1. SMMUv3 driver limitations
4.7.17. S-EL0 Partition support
4.7.18. Support for arch timer and system counter
4.7.19. Partition Lifecycle support
4.7.20. Support for live activation of Secure Partitions
4.7.20.1. Working memory region and staged packages
4.8. References
4.9. FF-A manifest binding to device tree
5. Threat Model
5.1. Introduction
5.2. Target of Evaluation
5.2.1. Data Flow Diagram
5.3. Threat Analysis
5.3.1. Trust boundaries
5.3.2. Assets
5.3.3. Threat Agents
5.3.4. Threat types
5.3.5. Threat Assessment
6. Security Advisories
6.1. Advisory HFV-1 (CVE-2025-10263)
6.1.1. Description
6.1.2. Impact on Hafnium
6.1.3. Mitigation in Hafnium
7. Change Log & Release Notes
7.1. 2.15.0 (2026-05-26)
7.1.1. Highlights
7.1.2. Features
7.1.3. Performance Improvements
7.1.4. Bug Fixes
7.1.5. Code Refactoring
7.1.6. Tests & Framework
7.1.7. Build & CI
7.1.8. Documentation
7.1.9. Maintenance & Chores
7.1.10. Code Style
7.2. 2.14.0 (2025-11-13)
7.2.1. Highlights
7.2.2. Features
7.2.3. Bug Fixes
7.2.4. Code Refactoring
7.2.5. Tests & Framework
7.2.6. Build & CI
7.2.7. Documentation
7.2.8. Maintenance & Chores
7.3. v2.13
7.3.1. Highlights
7.4. v2.12
7.4.1. Highlights
7.5. v2.11
7.5.1. Highlights
7.6. v2.10
7.6.1. Highlights
7.7. v2.9
7.7.1. Highlights
7.7.2. Known limitations:
7.8. v2.8
7.8.1. Highlights
7.8.2. Known limitations:
7.9. v2.7
7.9.1. Highlights
7.9.2. Known limitations:
7.10. v2.6
7.10.1. Highlights
7.10.2. Known limitations:
7.11. v2.5
7.11.1. Highlights
7.11.2. Known limitations:
7.12. v2.4
7.12.1. Highlights
7.12.2. Known limitations:
8. Appendix
8.1. Hypervisor
8.1.1. Get started
8.1.1.1. Getting the source code
8.1.1.2. Compiling the hypervisor
8.1.1.3. Running on QEMU
8.1.1.4. Running tests
8.1.2. Hafnium architecture
8.1.2.1. Security model
8.1.2.2. Design principles
8.1.2.3. VM model
8.1.2.4. System resources
8.1.3. Code structure
8.1.4. Running Hafnium under Arm FVP
8.1.4.1. Set up
8.1.4.2. Running tests
8.1.4.3. Other resources
8.1.5. Hafnium RAM disk
8.1.5.1. Create a RAM disk for Hafnium
8.1.6. Hermetic build
8.1.6.1. Installing Docker
8.1.6.2. Enabling for local builds
8.1.6.3. Running commands inside the container
8.1.6.4. Building container image
8.1.7. Hafnium Manifest
8.1.7.1. Format
8.1.7.2. Example
8.1.7.3. FF-A partition
8.1.7.4. Compiling
8.1.8. Preparing Linux
8.1.8.1. Build the kernel
8.1.8.2. Build the kernel Module
8.1.8.3. Build Busybox
8.1.8.4. Create a RAM disk for Linux
8.1.9. Scheduler VM expectations
8.1.9.1. Scheduling
8.1.9.2. Interrupt handling
8.1.10. Style guide
8.1.10.1. Clarifications
8.1.10.2. Naming symbols
8.1.10.3. Prose
8.1.10.4. Coding practices
8.1.10.5. Logging
8.1.11. Testing
8.1.11.1. Overview
8.1.11.2. Presubmit
8.1.11.3. QEMU tests
8.1.12. VM interface
8.1.12.1. CPU scheduling
8.1.12.2. PSCI
8.1.12.3. Hardware timers
8.1.12.4. Interrupts
8.1.12.5. Performance counters
8.1.12.6. Debug registers
8.1.12.7. RAS Extension registers
8.1.12.8. Asynchronous message passing
8.1.12.9. Memory
8.1.12.10. Cache
8.1.12.11. Logging
8.1.12.12. Configuration
8.1.12.13. Failure handling
8.1.12.14. TrustZone communication
8.1.12.15. Other SMC calls
9. Glossary
Hafnium
6.
Security Advisories
View page source
Previous
Next
6.
Security Advisories
Contents
6.1. Advisory HFV-1 (CVE-2025-10263)