In the Linux kernel, the following vulnerability has been resolved:
hisi_acc_vfio_pci: fix XQE dma address error
The dma addresses of EQE and AEQE are wrong after migration and results in guest kernel-mode encryption services failure. Comparing the definition of hardware registers, we found that there was an error when the data read from the register was combined into an address. Therefore, the address combination sequence needs to be corrected.
Even after fixing the above problem, we still have an issue where the Guest from an old kernel can get migrated to new kernel and may result in wrong data.
In order to ensure that the address is correct after migration, if an old magic number is detected, the dma address needs to be updated.
CVSS Details
- CVSS 3.1 Base Score: 5.5
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Debian | — | Upgrade linuxUpgrade linux-6.1 | Jul 4, 2025 | Jul 4, 2025 |
| Suse | — | Upgrade kernel-azure-vdsoUpgrade kernel-debug-develUpgrade dtb-amazonUpgrade kselftests-kmp-rtUpgrade gfs2-kmp-azureUpgrade kernel-rt_debug-develUpgrade ocfs2-kmp-64kbUpgrade dtb-freescaleUpgrade ocfs2-kmp-defaultUpgrade dlm-kmp-64kbUpgrade kernel-rt_debugUpgrade kernel-64kb-optionalUpgrade kernel-debugUpgrade kernel-rt-livepatch-develUpgrade dtb-broadcomUpgrade dtb-marvellUpgrade kernel-zfcpdumpUpgrade kernel-default-extraUpgrade dtb-caviumUpgrade kernel-azure-optionalUpgrade kernel-default-livepatchUpgrade kernel-kvmsmall-vdsoUpgrade kernel-source-rtUpgrade ocfs2-kmp-azureUpgrade gfs2-kmp-rtUpgrade ocfs2-kmp-rtUpgrade dtb-renesasUpgrade kernel-kvmsmall-develUpgrade dtb-lgUpgrade kernel-source-azureUpgrade kernel-azure-extraUpgrade kernel-rt_debug-vdsoUpgrade dtb-alteraUpgrade dtb-amdUpgrade dtb-hisiliconUpgrade reiserfs-kmp-rtUpgrade dtb-appleUpgrade kernel-symsUpgrade cluster-md-kmp-azureUpgrade kernel-syms-rtUpgrade kernel-develUpgrade dtb-allwinnerUpgrade cluster-md-kmp-defaultUpgrade kselftests-kmp-64kbUpgrade kernel-64kbUpgrade kernel-default-baseUpgrade gfs2-kmp-64kbUpgrade kernel-default-livepatch-develUpgrade kselftests-kmp-azureUpgrade reiserfs-kmp-defaultUpgrade kernel-docs-htmlUpgrade reiserfs-kmp-64kbUpgrade dtb-apmUpgrade kernel-64kb-develUpgrade kernel-default-develUpgrade kernel-rt-optionalUpgrade kernel-obs-qaUpgrade dlm-kmp-defaultUpgrade dtb-socionextUpgrade gfs2-kmp-defaultUpgrade kernel-devel-rtUpgrade kernel-debug-vdsoUpgrade dlm-kmp-rtUpgrade kernel-azureUpgrade kernel-default-vdsoUpgrade kernel-rt-extraUpgrade kernel-obs-buildUpgrade kernel-kvmsmallUpgrade kernel-rt-develUpgrade dtb-exynosUpgrade kernel-docsUpgrade kernel-default-optionalUpgrade cluster-md-kmp-rtUpgrade kernel-syms-azureUpgrade kernel-source-vanillaUpgrade cluster-md-kmp-64kbUpgrade kernel-rtUpgrade dtb-qcomUpgrade dlm-kmp-azureUpgrade dtb-mediatekUpgrade kernel-sourceUpgrade dtb-rockchipUpgrade reiserfs-kmp-azureUpgrade kernel-macrosUpgrade kernel-devel-azureUpgrade kernel-defaultUpgrade kernel-azure-develUpgrade dtb-amlogicUpgrade dtb-xilinxUpgrade dtb-nvidiaUpgrade kernel-rt-vdsoUpgrade kernel-64kb-extraUpgrade kernel-default-base-rebuildUpgrade dtb-sprdUpgrade dtb-armUpgrade kselftests-kmp-default | Dec 5, 2025 | Aug 18, 2025 |
| Ubuntu | — | Upgrade linux-image-6.14.0-32-genericUpgrade linux-image-6.8.0-2037-raspi-realtimeUpgrade linux-image-genericUpgrade linux-image-6.8.0-100-fipsUpgrade linux-image-nvidia-64k-hwe-22.04Upgrade linux-image-nvidia-6.8Upgrade linux-image-gkeopUpgrade linux-image-6.8.0-1046-aws-64kUpgrade linux-image-gcp-fips-6.8Upgrade linux-image-6.14.0-1016-gcpUpgrade linux-image-aws-6.14Upgrade linux-image-intel-iot-realtimeUpgrade linux-image-azure-6.8Upgrade linux-image-lowlatency-64k-6.8Upgrade linux-image-azure-6.14Upgrade linux-image-nvidia-hwe-22.04Upgrade linux-image-generic-64kUpgrade linux-image-nvidia-lowlatency-6.8Upgrade linux-image-6.8.0-1043-oracleUpgrade linux-image-nvidia-lowlatency-64k-6.8Upgrade linux-image-lowlatency-64k-hwe-22.04Upgrade linux-image-generic-lpaeUpgrade linux-image-oem-22.04Upgrade linux-image-generic-64k-hwe-22.04Upgrade linux-image-virtualUpgrade linux-image-6.8.0-1051-azureUpgrade linux-image-aws-64kUpgrade linux-image-gkeUpgrade linux-image-6.8.0-1046-nvidia-lowlatency-64kUpgrade linux-image-xilinx-6.8Upgrade linux-image-6.14.0-1013-awsUpgrade linux-image-realtime-hwe-24.04Upgrade linux-image-raspi-realtime-6.8Upgrade linux-image-generic-6.14Upgrade linux-image-lowlatency-6.8Upgrade linux-image-oracle-lts-24.04Upgrade linux-image-6.14.0-1016-gcp-64kUpgrade linux-image-oracleUpgrade linux-image-realtime-6.14Upgrade linux-image-oem-22.04dUpgrade linux-image-realtime-hwe-22.04Upgrade linux-image-gke-6.8Upgrade linux-image-aws-fipsUpgrade linux-image-6.8.0-1047-gcpUpgrade linux-image-6.8.0-1043-gkeUpgrade linux-image-6.14.0-1013-oracle-64kUpgrade linux-image-nvidiaUpgrade linux-image-fipsUpgrade linux-image-oem-22.04cUpgrade linux-image-gcp-64kUpgrade linux-image-gcp-64k-6.14Upgrade linux-image-realtimeUpgrade linux-image-xilinx-zynqmpUpgrade linux-image-intel-iotgUpgrade linux-image-6.8.0-1044-ibmUpgrade linux-image-gcp-64k-6.8Upgrade linux-image-6.8.0-1046-azureUpgrade linux-image-raspi-6.8Upgrade linux-image-oem-24.04Upgrade linux-image-virtual-hwe-24.04Upgrade linux-image-6.8.0-1046-nvidiaUpgrade linux-image-lowlatency-64kUpgrade linux-image-6.8.0-1030-gkeopUpgrade linux-image-gcp-6.14Upgrade linux-image-gcp-64k-lts-24.04Upgrade linux-image-virtual-hwe-22.04Upgrade linux-image-6.14.0-1014-raspiUpgrade linux-image-virtual-6.14Upgrade linux-image-gcpUpgrade linux-image-6.8.0-1047-gcp-64kUpgrade linux-image-aws-lts-24.04Upgrade linux-image-6.8.0-1046-azure-fipsUpgrade linux-image-oracle-64k-6.8Upgrade linux-image-gke-64k-6.8Upgrade linux-image-6.8.0-1046-awsUpgrade linux-image-oem-24.04cUpgrade linux-image-6.14.0-1012-realtimeUpgrade linux-image-gcp-6.8Upgrade linux-image-aws-fips-6.8Upgrade linux-image-aws-6.8Upgrade linux-image-awsUpgrade linux-image-ibmUpgrade linux-image-azure-fipsUpgrade linux-image-6.8.0-1043-gke-64kUpgrade linux-image-ibm-6.8Upgrade linux-image-generic-64k-hwe-24.04Upgrade linux-image-gcp-lts-24.04Upgrade linux-image-fips-6.8Upgrade linux-image-6.14.0-1012-oemUpgrade linux-image-6.14.0-1012-azureUpgrade linux-image-raspi-6.14Upgrade linux-image-oem-22.04aUpgrade linux-image-nvidia-64kUpgrade linux-image-6.8.0-1046-nvidia-64kUpgrade linux-image-oem-22.04bUpgrade linux-image-nvidia-lowlatencyUpgrade linux-image-6.14.0-1013-aws-64kUpgrade linux-image-xilinxUpgrade linux-image-oracle-64k-6.14Upgrade linux-image-gcp-fipsUpgrade linux-image-oem-24.04aUpgrade linux-image-azureUpgrade linux-image-6.8.0-1043-oracle-64kUpgrade linux-image-6.14.0-32-generic-64kUpgrade linux-image-ibm-lts-24.04Upgrade linux-image-generic-6.8Upgrade linux-image-generic-64k-6.8Upgrade linux-image-lowlatency-hwe-22.04Upgrade linux-image-6.8.0-1046-aws-fipsUpgrade linux-image-oracle-6.14Upgrade linux-image-aws-64k-6.14Upgrade linux-image-6.8.0-100-lowlatency-64kUpgrade linux-image-virtual-6.8Upgrade linux-image-6.8.0-100-genericUpgrade linux-image-realtime-6.8.1Upgrade linux-image-gkeop-6.8Upgrade linux-image-gke-64kUpgrade linux-image-aws-64k-6.8Upgrade linux-image-6.8.0-1023-xilinxUpgrade linux-image-generic-hwe-24.04Upgrade linux-image-oracle-64kUpgrade linux-image-6.14.0-1013-oracleUpgrade linux-image-oem-6.14Upgrade linux-image-nvidia-lowlatency-64kUpgrade linux-image-6.8.0-100-lowlatencyUpgrade linux-image-generic-hwe-22.04Upgrade linux-image-azure-lts-24.04Upgrade linux-image-6.8.0-1047-gcp-fipsUpgrade linux-image-generic-64k-6.14Upgrade linux-image-6.8.0-1046-nvidia-lowlatencyUpgrade linux-image-oracle-6.8Upgrade linux-image-6.8.0-1047-raspiUpgrade linux-image-oem-24.04bUpgrade linux-image-oracle-64k-lts-24.04Upgrade linux-image-azure-fips-6.8Upgrade linux-image-kvmUpgrade linux-image-lowlatencyUpgrade linux-image-ibm-classicUpgrade linux-image-aws-64k-lts-24.04Upgrade linux-image-raspiUpgrade linux-image-6.8.1-1041-realtimeUpgrade linux-image-6.8.0-100-generic-64kUpgrade linux-image-raspi-realtimeUpgrade linux-image-nvidia-64k-6.8 | Jul 7, 2025 | Jul 3, 2025 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Oct 10, 2025 | Jul 3, 2025 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub