CVE-2025-38158
Severity CVSS v4.0:
Pending analysis
Type:
Unavailable / Other
Publication date:
03/07/2025
Last modified:
03/07/2025
Description
In the Linux kernel, the following vulnerability has been resolved:<br />
<br />
hisi_acc_vfio_pci: fix XQE dma address error<br />
<br />
The dma addresses of EQE and AEQE are wrong after migration and<br />
results in guest kernel-mode encryption services failure.<br />
Comparing the definition of hardware registers, we found that<br />
there was an error when the data read from the register was<br />
combined into an address. Therefore, the address combination<br />
sequence needs to be corrected.<br />
<br />
Even after fixing the above problem, we still have an issue<br />
where the Guest from an old kernel can get migrated to<br />
new kernel and may result in wrong data.<br />
<br />
In order to ensure that the address is correct after migration,<br />
if an old magic number is detected, the dma address needs to be<br />
updated.
Impact
References to Advisories, Solutions, and Tools
- https://git.kernel.org/stable/c/7710c883eb8cb5cf510ca47ec0e26c6cb7e94a4f
- https://git.kernel.org/stable/c/809a9c10274e1bcf6d05f1c0341459a425a4f05f
- https://git.kernel.org/stable/c/884a76e813178778d271fea59783763d32bb7e72
- https://git.kernel.org/stable/c/8bb7170c5a055ea17c6857c256ee73c10ff872eb
- https://git.kernel.org/stable/c/f0423873e7aeb69cb68f4e8fa3827832e7b037ba