Bug 2379218 (CVE-2025-38283) - CVE-2025-38283 kernel: hisi_acc_vfio_pci: bugfix live migration function without VF device driver
Summary: CVE-2025-38283 kernel: hisi_acc_vfio_pci: bugfix live migration function with...
Keywords:
Status: NEW
Alias: CVE-2025-38283
Product: Security Response
Classification: Other
Component: vulnerability
Version: unspecified
Hardware: All
OS: Linux
medium
medium
Target Milestone: ---
Assignee: Product Security DevOps Team
QA Contact:
URL:
Whiteboard:
Depends On:
Blocks:
TreeView+ depends on / blocked
 
Reported: 2025-07-10 08:04 UTC by OSIDB Bzimport
Modified: 2025-07-11 07:21 UTC (History)
0 users

Fixed In Version:
Clone Of:
Environment:
Last Closed:
Embargoed:


Attachments (Terms of Use)

Description OSIDB Bzimport 2025-07-10 08:04:10 UTC
In the Linux kernel, the following vulnerability has been resolved:

hisi_acc_vfio_pci: bugfix live migration function without VF device driver

If the VF device driver is not loaded in the Guest OS and we attempt to
perform device data migration, the address of the migrated data will
be NULL.
The live migration recovery operation on the destination side will
access a null address value, which will cause access errors.

Therefore, live migration of VMs without added VF device drivers
does not require device data migration.
In addition, when the queue address data obtained by the destination
is empty, device queue recovery processing will not be performed.

Comment 1 Avinash Hanwate 2025-07-11 07:19:58 UTC
Upstream advisory:
https://lore.kernel.org/linux-cve-announce/2025071010-CVE-2025-38283-a62b@gregkh/T


Note You need to log in before you can comment on or make changes to this bug.