CVE-2025-38283

medium

In the Linux kernel, the following vulnerability has been resolved: hisi_acc_vfio_pci: bugfix live migration function without VF device driver If the VF devi…

Vendor / product: Linux — linux kernel

In the Linux kernel, the following vulnerability has been resolved: hisi_acc_vfio_pci: bugfix live migration function without VF device driver If the VF device driver is not loaded in the Guest OS and we attempt to perform device data migration, the address of the migrated data will be NULL. The live migration recovery operation on the destination side will access a null address value, which will cause access errors. Therefore, live migration of VMs without added VF device drivers does not require device data migration. In addition, when the queue address data obtained by the destination is empty, device queue recovery processing will not be performed.

CVSS

5.5

5.5 (CVSS v3.1)

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

Severity source: NVD CVSS v3.1 (nvd@nist.gov)

Timeline (UTC)

Published: 2025-07-10 08:15

Modified: 2026-10-30 13:18

NVD status: Modified

Last synced 1 day ago

Verified against the source API 2026-11-03 07:33 UTC

Exploitation

Not listed in CISA KEV (as of last catalog sync)

Absence from KEV does not mean a CVE is not exploited. Exploitation status: unknown (no authoritative evidence in our sources).

Affected products

linux / linux_kernel ≥5.18 <6.6.94, ≥6.7 <6.12.34, ≥6.13 <6.15.3

Weakness classification (CWE)

NVD-CWE-noinfo

Source: NVD / CISA. “NVD-CWE-Other” and “NVD-CWE-noinfo” mean NVD could not assign a specific weakness.

Mitigation & advisories

Patch / mitigation: https://git.kernel.org/stable/c/2777a40998deb36f96b6afc48bd397cf58a4edf0

Patch / mitigation: https://git.kernel.org/stable/c/53e8e8e909f7c3a77857d09d2b733a42547f57ee

Patch / mitigation: https://git.kernel.org/stable/c/59a834592dd200969fdf3c61be1cb0615c647e45

Patch / mitigation: https://git.kernel.org/stable/c/b5ef128926cd34dffa2a66607b9c82b902581ef8

References

https://git.kernel.org/stable/c/2777a40998deb36f96b6afc48bd397cf58a4edf0 416baaa9-dc9f-4396-8d5f-8c081fb06d67
https://git.kernel.org/stable/c/4bbc4db69264d4d38a6340d9751fb213943346d3 416baaa9-dc9f-4396-8d5f-8c081fb06d67
https://git.kernel.org/stable/c/53e8e8e909f7c3a77857d09d2b733a42547f57ee 416baaa9-dc9f-4396-8d5f-8c081fb06d67
https://git.kernel.org/stable/c/59a834592dd200969fdf3c61be1cb0615c647e45 416baaa9-dc9f-4396-8d5f-8c081fb06d67
https://git.kernel.org/stable/c/b5ef128926cd34dffa2a66607b9c82b902581ef8 416baaa9-dc9f-4396-8d5f-8c081fb06d67

Data sources

NVD CVE API 2.0 — fetched 2026-11-03 07:33 UTC · record ↗

Learn the basics

Understanding CVEs and CVSS Scores

CVE-2025-38283

Affected products

Weakness classification (CWE)

Mitigation & advisories

References

Data sources

Learn the basics

Related CVEs