In the Linux kernel, the following vulnerability has been resolved:
hisi_acc_vfio_pci: fix XQE dma address error
The dma addresses of EQE and AEQE are wrong after migration and results in guest kernel-mode encryption services failure. Comparing the definition of hardware registers, we found that there was an error when the data read from the register was combined into an address. Therefore, the address combination sequence needs to be corrected.
Even after fixing the above problem, we still have an issue where the Guest from an old kernel can get migrated to new kernel and may result in wrong data.
In order to ensure that the address is correct after migration, if an old magic number is detected, the dma address needs to be updated.
CVSS Details
- CVSS 3.1 Base Score: 5.5
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Debian | — | Upgrade linux-6.1Upgrade linux | Jul 4, 2025 | Jul 4, 2025 |
| Suse | — | Upgrade kernel-rt-livepatch-develUpgrade kernel-rt_debugUpgrade dtb-allwinnerUpgrade kernel-default-livepatch-develUpgrade ocfs2-kmp-azureUpgrade kernel-azure-extraUpgrade ocfs2-kmp-defaultUpgrade dlm-kmp-64kbUpgrade kernel-64kb-optionalUpgrade kernel-azure-optionalUpgrade kernel-debugUpgrade dtb-socionextUpgrade gfs2-kmp-64kbUpgrade kernel-64kbUpgrade kernel-develUpgrade kernel-zfcpdumpUpgrade dtb-caviumUpgrade kernel-source-rtUpgrade kernel-default-extraUpgrade kernel-default-livepatchUpgrade kernel-kvmsmall-vdsoUpgrade dtb-freescaleUpgrade dtb-marvellUpgrade dtb-hisiliconUpgrade kernel-azure-vdsoUpgrade kselftests-kmp-rtUpgrade dtb-amazonUpgrade kernel-rt_debug-vdsoUpgrade kselftests-kmp-64kbUpgrade cluster-md-kmp-defaultUpgrade kernel-syms-rtUpgrade kernel-source-azureUpgrade kernel-symsUpgrade reiserfs-kmp-64kbUpgrade cluster-md-kmp-azureUpgrade ocfs2-kmp-rtUpgrade gfs2-kmp-rtUpgrade dtb-amdUpgrade dlm-kmp-defaultUpgrade dtb-appleUpgrade kernel-debug-develUpgrade dtb-lgUpgrade kernel-default-develUpgrade dtb-alteraUpgrade dtb-apmUpgrade kernel-obs-qaUpgrade kernel-rt-optionalUpgrade kernel-rt_debug-develUpgrade dtb-renesasUpgrade reiserfs-kmp-defaultUpgrade kernel-default-baseUpgrade kselftests-kmp-azureUpgrade ocfs2-kmp-64kbUpgrade dtb-broadcomUpgrade kernel-docs-htmlUpgrade gfs2-kmp-azureUpgrade kernel-kvmsmall-develUpgrade reiserfs-kmp-rtUpgrade kernel-64kb-develUpgrade dtb-sprdUpgrade dtb-xilinxUpgrade dlm-kmp-rtUpgrade kernel-azureUpgrade kernel-rt-vdsoUpgrade kernel-devel-rtUpgrade gfs2-kmp-defaultUpgrade dtb-nvidiaUpgrade kernel-rtUpgrade kernel-source-vanillaUpgrade kernel-default-base-rebuildUpgrade kernel-syms-azureUpgrade kselftests-kmp-defaultUpgrade kernel-64kb-extraUpgrade dtb-mediatekUpgrade kernel-devel-azureUpgrade kernel-defaultUpgrade dlm-kmp-azureUpgrade cluster-md-kmp-rtUpgrade cluster-md-kmp-64kbUpgrade kernel-docsUpgrade kernel-default-optionalUpgrade dtb-qcomUpgrade dtb-exynosUpgrade kernel-macrosUpgrade kernel-kvmsmallUpgrade kernel-rt-extraUpgrade kernel-obs-buildUpgrade kernel-rt-develUpgrade reiserfs-kmp-azureUpgrade kernel-default-vdsoUpgrade kernel-azure-develUpgrade dtb-amlogicUpgrade kernel-sourceUpgrade dtb-rockchipUpgrade dtb-armUpgrade kernel-debug-vdso | Dec 5, 2025 | Aug 18, 2025 |
| Ubuntu | — | Upgrade linux-image-nvidia-64k-hwe-22.04Upgrade linux-image-virtualUpgrade linux-image-6.8.0-1043-oracleUpgrade linux-image-6.8.0-1047-gcpUpgrade linux-image-realtimeUpgrade linux-image-6.14.0-1016-gcpUpgrade linux-image-xilinx-zynqmpUpgrade linux-image-6.8.0-100-fipsUpgrade linux-image-oem-22.04dUpgrade linux-image-oracleUpgrade linux-image-realtime-6.14Upgrade linux-image-aws-6.14Upgrade linux-image-6.14.0-1013-oracle-64kUpgrade linux-image-6.8.0-1044-ibmUpgrade linux-image-realtime-hwe-22.04Upgrade linux-image-gke-6.8Upgrade linux-image-virtual-hwe-22.04Upgrade linux-image-oem-22.04cUpgrade linux-image-nvidiaUpgrade linux-image-intel-iot-realtimeUpgrade linux-image-genericUpgrade linux-image-gkeopUpgrade linux-image-6.8.0-1046-nvidia-lowlatency-64kUpgrade linux-image-6.14.0-32-genericUpgrade linux-image-azure-6.8Upgrade linux-image-generic-64kUpgrade linux-image-nvidia-hwe-22.04Upgrade linux-image-gcp-fips-6.8Upgrade linux-image-6.8.0-1030-gkeopUpgrade linux-image-gcp-6.14Upgrade linux-image-raspi-6.8Upgrade linux-image-gcp-64k-lts-24.04Upgrade linux-image-6.8.0-1046-azureUpgrade linux-image-lowlatency-64k-hwe-22.04Upgrade linux-image-nvidia-6.8Upgrade linux-image-6.8.0-1051-azureUpgrade linux-image-aws-64kUpgrade linux-image-generic-lpaeUpgrade linux-image-gkeUpgrade linux-image-nvidia-lowlatency-6.8Upgrade linux-image-6.14.0-1016-gcp-64kUpgrade linux-image-6.8.0-2037-raspi-realtimeUpgrade linux-image-gcp-64kUpgrade linux-image-virtual-hwe-24.04Upgrade linux-image-6.14.0-1014-raspiUpgrade linux-image-6.8.0-1046-nvidiaUpgrade linux-image-6.8.0-1046-aws-64kUpgrade linux-image-azure-6.14Upgrade linux-image-gcp-64k-6.8Upgrade linux-image-lowlatency-64kUpgrade linux-image-6.8.0-1043-gkeUpgrade linux-image-oem-22.04Upgrade linux-image-oem-24.04Upgrade linux-image-generic-64k-hwe-22.04Upgrade linux-image-nvidia-lowlatency-64k-6.8Upgrade linux-image-6.14.0-1013-awsUpgrade linux-image-intel-iotgUpgrade linux-image-lowlatency-64k-6.8Upgrade linux-image-fipsUpgrade linux-image-lowlatency-6.8Upgrade linux-image-oracle-lts-24.04Upgrade linux-image-generic-6.14Upgrade linux-image-raspi-realtime-6.8Upgrade linux-image-aws-fipsUpgrade linux-image-realtime-hwe-24.04Upgrade linux-image-xilinx-6.8Upgrade linux-image-gcp-64k-6.14Upgrade linux-image-gcpUpgrade linux-image-nvidia-lowlatencyUpgrade linux-image-6.14.0-32-generic-64kUpgrade linux-image-6.8.0-1043-oracle-64kUpgrade linux-image-gkeop-6.8Upgrade linux-image-gke-64kUpgrade linux-image-lowlatency-hwe-22.04Upgrade linux-image-6.8.0-1046-aws-fipsUpgrade linux-image-6.8.0-1023-xilinxUpgrade linux-image-6.8.0-100-lowlatency-64kUpgrade linux-image-virtual-6.8Upgrade linux-image-realtime-6.8.1Upgrade linux-image-oracle-64kUpgrade linux-image-generic-hwe-24.04Upgrade linux-image-6.8.0-100-genericUpgrade linux-image-gke-64k-6.8Upgrade linux-image-6.14.0-1013-aws-64kUpgrade linux-image-6.8.0-1047-gcp-64kUpgrade linux-image-gcp-fipsUpgrade linux-image-xilinxUpgrade linux-image-raspiUpgrade linux-image-aws-64k-lts-24.04Upgrade linux-image-aws-64k-6.14Upgrade linux-image-kvmUpgrade linux-image-ibm-classicUpgrade linux-image-azure-fips-6.8Upgrade linux-image-6.8.0-1047-raspiUpgrade linux-image-oracle-64k-lts-24.04Upgrade linux-image-oem-24.04bUpgrade linux-image-lowlatencyUpgrade linux-image-virtual-6.14Upgrade linux-image-ibmUpgrade linux-image-gcp-6.8Upgrade linux-image-aws-fips-6.8Upgrade linux-image-aws-6.8Upgrade linux-image-awsUpgrade linux-image-6.14.0-1012-realtimeUpgrade linux-image-azure-lts-24.04Upgrade linux-image-6.8.0-1047-gcp-fipsUpgrade linux-image-6.8.0-1046-nvidia-lowlatencyUpgrade linux-image-6.14.0-1013-oracleUpgrade linux-image-generic-64k-6.14Upgrade linux-image-6.8.0-100-lowlatencyUpgrade linux-image-generic-hwe-22.04Upgrade linux-image-oem-6.14Upgrade linux-image-oracle-6.8Upgrade linux-image-nvidia-lowlatency-64kUpgrade linux-image-oem-24.04cUpgrade linux-image-oem-22.04aUpgrade linux-image-nvidia-64kUpgrade linux-image-fips-6.8Upgrade linux-image-6.8.0-1043-gke-64kUpgrade linux-image-6.14.0-1012-oemUpgrade linux-image-6.14.0-1012-azureUpgrade linux-image-nvidia-64k-6.8Upgrade linux-image-raspi-realtimeUpgrade linux-image-aws-lts-24.04Upgrade linux-image-6.8.1-1041-realtimeUpgrade linux-image-6.8.0-100-generic-64kUpgrade linux-image-ibm-6.8Upgrade linux-image-gcp-lts-24.04Upgrade linux-image-raspi-6.14Upgrade linux-image-azure-fipsUpgrade linux-image-oracle-6.14Upgrade linux-image-generic-64k-hwe-24.04Upgrade linux-image-oracle-64k-6.14Upgrade linux-image-6.8.0-1046-awsUpgrade linux-image-oracle-64k-6.8Upgrade linux-image-oem-22.04bUpgrade linux-image-oem-24.04aUpgrade linux-image-ibm-lts-24.04Upgrade linux-image-generic-6.8Upgrade linux-image-azureUpgrade linux-image-6.8.0-1046-azure-fipsUpgrade linux-image-6.8.0-1046-nvidia-64kUpgrade linux-image-generic-64k-6.8Upgrade linux-image-aws-64k-6.8 | Jul 7, 2025 | Jul 3, 2025 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Oct 10, 2025 | Jul 3, 2025 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub