Hi,

We are pleased to announce the formal release of Trusted Firmware-A version 2.14 bundle of project deliverables.

This includes Trusted Firmware-A, Trusted Firmware-A Tests, Hafnium, TF-RMM, Trusted Services, and TF-A OpenCI scripts/jobs components.

These went live on Nov, 24th 2025.

Please find tag references and change logs at the end of this email.

Many thanks to the trustedfirmware.org community for the active engagement in delivering this release!

Notable features of the release version 2.14 are as follows:

TF-A/EL3

New architectural features support: FEAT_FGWTE3, FEAT_IDTE3, FEAT_RME_GPC2, FEAT_AIE, FEAT_CPA2, FEAT_MPAM_PE_BW_CTRL, FEAT_PFAR, FEAT_RME_GDI.
Live Firmware Activation: base support enabling TF-RMM LFA, added RMM MEM RESERVE ABI.
Armv9 CPU power down abandon support
GICv5 driver permitting normal world kernel boot
GIC720-AE support added
Per-cpu framework supporting NUMA platforms
SMCCC SoC name support (SMCCC v1.6 SMCCC_ARCH_SOC_ID)
SPMD: added FF-A v1.3 FFA_NS_RES_INFO_GET, FFA_ABORT interfaces
EL3 SPMC: add multiple UUIDs support, TPM event log delivered by HOB list, FFA_MEM_RETRIEVE_REQ from hypervisor
RME: FEAT_D128 for realm world, SMCCC_ARCH_FEATURE_AVAILABILITY
Platforms: RD-Aspen added, updates to Arm FVP/Juno, AMD Versal Gen2, Intel, MT8189, MT8196, i.MX94, i.MX95, S32G274A, QTI Kodiak, Renesas R-Car, STM32MP1, STM32MP2, STM32MP21, STM32MP25, Xilinx Versal, ZynqMP

Boot flow

Transfer list and event log libraries now offered as shared libraries consumed as submodules by TF-A.
Update to mbedTLS 3.6.5
Various PSA FWU improvements, namely BL2 in a dedicated FIP, GPT-corruption notifications to BL32, and expanded FWU tests.

Errata/Security mitigations (CPU/GIC)

New CPU support: Arm Lumex C1, Dionysus, Caddo/Veymont, Venom.
Added close to 30 new CPU errata across multiple processor families, based on the latest SDEN updates.

Hafnium/SPM (S-EL2)

FFA_NS_RES_INFO_GET ABI added
Partition lifecycle support: new states, abort handling. Pre-requisite to secure partitions live firmware activation.
Notifications support refactored with per-vCPU notifications removed.

TF-RMM (R-EL2)

RMM v1.1. ALP12 base Device Assignment support
RMI VDEV ABIs, PDEV life cycle, root port IDE key programming, SPDM client as EL0 app.

Improved ID registers trapping leveraging SMCCC ARCH_FEATURE_AVAILABILITY, in light of future FEAT_IDTE3 support.
Additional architectural support: FEAT_TCR2, FEAT_D128, single-copy atomics,

TF-A Tests