PT-2025-27743 · Linux+6 · Linux Kernel+6
Published
2025-05-10
·
Updated
2026-04-20
·
CVE-2025-38158
CVSS v3.1
5.5
Medium
| Vector | AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H |
Name of the Vulnerable Software and Affected Versions:
Linux kernel (affected versions not specified)
Description:
A vulnerability in the Linux kernel has been resolved, specifically in the hisi acc vfio pci module, where the dma addresses of EQE and AEQE are incorrect after migration, resulting in guest kernel-mode encryption services failure. The issue arises from an error when combining data read from hardware registers into an address. Even after fixing this problem, an issue remains where a guest from an old kernel can be migrated to a new kernel, potentially resulting in incorrect data. To ensure correct addresses after migration, the dma address needs to be updated if an old magic number is detected.
Recommendations:
At the moment, there is no information about a newer version that contains a fix for this vulnerability.
Exploit
RCE
Found an issue in the description? Have something to add? Feel free to write us 👾
Weakness Enumeration
Related Identifiers
Affected Products
Astra Linux
Debian
Linuxmint
Linux Kernel
Red Os
Suse
Ubuntu