CVE-2025-38158

hisi_acc_vfio_pci: fix XQE dma address error

State: Published
Severity: Not scored
Published: Jul 3, 2025
Updated: May 11, 2026
Reserved: Apr 16, 2025

Description

In the Linux kernel, the following vulnerability has been resolved:

hisi_acc_vfio_pci: fix XQE dma address error

The dma addresses of EQE and AEQE are wrong after migration and results in guest kernel-mode encryption services failure. Comparing the definition of hardware registers, we found that there was an error when the data read from the register was combined into an address. Therefore, the address combination sequence needs to be corrected.

Even after fixing the above problem, we still have an issue where the Guest from an old kernel can get migrated to new kernel and may result in wrong data.

In order to ensure that the address is correct after migration, if an old magic number is detected, the dma address needs to be updated.

Scores

The record has no CVSS score.

Weaknesses

The record names no weakness.

Affected Products

Product	Versions
LinuxLinux	b0eed085903e7758532696d64397901a75bba8ba to before 809a9c10274e1bcf6d05f1c0341459a425a4f05fAffected b0eed085903e7758532696d64397901a75bba8ba to before f0423873e7aeb69cb68f4e8fa3827832e7b037baAffected b0eed085903e7758532696d64397901a75bba8ba to before 884a76e813178778d271fea59783763d32bb7e72Affected b0eed085903e7758532696d64397901a75bba8ba to before 7710c883eb8cb5cf510ca47ec0e26c6cb7e94a4fAffected b0eed085903e7758532696d64397901a75bba8ba to before 8bb7170c5a055ea17c6857c256ee73c10ff872ebAffected
LinuxLinux	5.18Affected before 5.18Not affected 6.1.142 through 6.1.Not affected 6.6.94 through 6.6.Not affected 6.12.34 through 6.12.Not affected 6.15.3 through 6.15.Not affected 6.16 and laterNot affected

Product

Versions

LinuxLinux

b0eed085903e7758532696d64397901a75bba8ba to before 809a9c10274e1bcf6d05f1c0341459a425a4f05fAffected
b0eed085903e7758532696d64397901a75bba8ba to before f0423873e7aeb69cb68f4e8fa3827832e7b037baAffected
b0eed085903e7758532696d64397901a75bba8ba to before 884a76e813178778d271fea59783763d32bb7e72Affected
b0eed085903e7758532696d64397901a75bba8ba to before 7710c883eb8cb5cf510ca47ec0e26c6cb7e94a4fAffected
b0eed085903e7758532696d64397901a75bba8ba to before 8bb7170c5a055ea17c6857c256ee73c10ff872ebAffected

LinuxLinux

5.18Affected
before 5.18Not affected
6.1.142 through 6.1.*Not affected
6.6.94 through 6.6.*Not affected
6.12.34 through 6.12.*Not affected
6.15.3 through 6.15.*Not affected
6.16 and laterNot affected

References

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.