CVE-2025-38283

See a problem?
Please try reporting it to the source first.
Source
https://nvd.nist.gov/vuln/detail/CVE-2025-38283
Import Source
https://storage.googleapis.com/osv-test-cve-osv-conversion/osv-output/CVE-2025-38283.json
JSON Data
https://api.test.osv.dev/v1/vulns/CVE-2025-38283
Downstream
Related
Published
2025-07-10T07:42:01Z
Modified
2025-10-18T01:15:57.197680Z
Summary
hisi_acc_vfio_pci: bugfix live migration function without VF device driver
Details

In the Linux kernel, the following vulnerability has been resolved:

hisiaccvfio_pci: bugfix live migration function without VF device driver

If the VF device driver is not loaded in the Guest OS and we attempt to perform device data migration, the address of the migrated data will be NULL. The live migration recovery operation on the destination side will access a null address value, which will cause access errors.

Therefore, live migration of VMs without added VF device drivers does not require device data migration. In addition, when the queue address data obtained by the destination is empty, device queue recovery processing will not be performed.

References

Affected packages

Git / git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git

Affected ranges

Type
GIT
Repo
https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git
Events
Introduced
b0eed085903e7758532696d64397901a75bba8ba
Fixed
b5ef128926cd34dffa2a66607b9c82b902581ef8
Type
GIT
Repo
https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git
Events
Introduced
b0eed085903e7758532696d64397901a75bba8ba
Fixed
59a834592dd200969fdf3c61be1cb0615c647e45
Type
GIT
Repo
https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git
Events
Introduced
b0eed085903e7758532696d64397901a75bba8ba
Fixed
53e8e8e909f7c3a77857d09d2b733a42547f57ee
Type
GIT
Repo
https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git
Events
Introduced
b0eed085903e7758532696d64397901a75bba8ba
Fixed
2777a40998deb36f96b6afc48bd397cf58a4edf0

Affected versions

v5.*

v5.17
v5.17-rc6
v5.17-rc7
v5.17-rc8
v5.18
v5.18-rc1
v5.18-rc2
v5.18-rc3
v5.18-rc4
v5.18-rc5
v5.18-rc6
v5.18-rc7
v5.19
v5.19-rc1
v5.19-rc2
v5.19-rc3
v5.19-rc4
v5.19-rc5
v5.19-rc6
v5.19-rc7
v5.19-rc8

v6.*

v6.0
v6.0-rc1
v6.0-rc2
v6.0-rc3
v6.0-rc4
v6.0-rc5
v6.0-rc6
v6.0-rc7
v6.1
v6.1-rc1
v6.1-rc2
v6.1-rc3
v6.1-rc4
v6.1-rc5
v6.1-rc6
v6.1-rc7
v6.1-rc8
v6.10
v6.10-rc1
v6.10-rc2
v6.10-rc3
v6.10-rc4
v6.10-rc5
v6.10-rc6
v6.10-rc7
v6.11
v6.11-rc1
v6.11-rc2
v6.11-rc3
v6.11-rc4
v6.11-rc5
v6.11-rc6
v6.11-rc7
v6.12
v6.12-rc1
v6.12-rc2
v6.12-rc3
v6.12-rc4
v6.12-rc5
v6.12-rc6
v6.12-rc7
v6.12.1
v6.12.10
v6.12.11
v6.12.12
v6.12.13
v6.12.14
v6.12.15
v6.12.16
v6.12.17
v6.12.18
v6.12.19
v6.12.2
v6.12.20
v6.12.21
v6.12.22
v6.12.23
v6.12.24
v6.12.25
v6.12.26
v6.12.27
v6.12.28
v6.12.29
v6.12.3
v6.12.30
v6.12.31
v6.12.32
v6.12.33
v6.12.4
v6.12.5
v6.12.6
v6.12.7
v6.12.8
v6.12.9
v6.13
v6.13-rc1
v6.13-rc2
v6.13-rc3
v6.13-rc4
v6.13-rc5
v6.13-rc6
v6.13-rc7
v6.14
v6.14-rc1
v6.14-rc2
v6.14-rc3
v6.14-rc4
v6.14-rc5
v6.14-rc6
v6.14-rc7
v6.15
v6.15-rc1
v6.15-rc2
v6.15-rc3
v6.15-rc4
v6.15-rc5
v6.15-rc6
v6.15-rc7
v6.15.1
v6.15.2
v6.2
v6.2-rc1
v6.2-rc2
v6.2-rc3
v6.2-rc4
v6.2-rc5
v6.2-rc6
v6.2-rc7
v6.2-rc8
v6.3
v6.3-rc1
v6.3-rc2
v6.3-rc3
v6.3-rc4
v6.3-rc5
v6.3-rc6
v6.3-rc7
v6.4
v6.4-rc1
v6.4-rc2
v6.4-rc3
v6.4-rc4
v6.4-rc5
v6.4-rc6
v6.4-rc7
v6.5
v6.5-rc1
v6.5-rc2
v6.5-rc3
v6.5-rc4
v6.5-rc5
v6.5-rc6
v6.5-rc7
v6.6
v6.6-rc1
v6.6-rc2
v6.6-rc3
v6.6-rc4
v6.6-rc5
v6.6-rc6
v6.6-rc7
v6.6.1
v6.6.10
v6.6.11
v6.6.12
v6.6.13
v6.6.14
v6.6.15
v6.6.16
v6.6.17
v6.6.18
v6.6.19
v6.6.2
v6.6.20
v6.6.21
v6.6.22
v6.6.23
v6.6.24
v6.6.25
v6.6.26
v6.6.27
v6.6.28
v6.6.29
v6.6.3
v6.6.30
v6.6.31
v6.6.32
v6.6.33
v6.6.34
v6.6.35
v6.6.36
v6.6.37
v6.6.38
v6.6.39
v6.6.4
v6.6.40
v6.6.41
v6.6.42
v6.6.43
v6.6.44
v6.6.45
v6.6.46
v6.6.47
v6.6.48
v6.6.49
v6.6.5
v6.6.50
v6.6.51
v6.6.52
v6.6.53
v6.6.54
v6.6.55
v6.6.56
v6.6.57
v6.6.58
v6.6.59
v6.6.6
v6.6.60
v6.6.61
v6.6.62
v6.6.63
v6.6.64
v6.6.65
v6.6.66
v6.6.67
v6.6.68
v6.6.69
v6.6.7
v6.6.70
v6.6.71
v6.6.72
v6.6.73
v6.6.74
v6.6.75
v6.6.76
v6.6.77
v6.6.78
v6.6.79
v6.6.8
v6.6.80
v6.6.81
v6.6.82
v6.6.83
v6.6.84
v6.6.85
v6.6.86
v6.6.87
v6.6.88
v6.6.89
v6.6.9
v6.6.90
v6.6.91
v6.6.92
v6.6.93
v6.7
v6.7-rc1
v6.7-rc2
v6.7-rc3
v6.7-rc4
v6.7-rc5
v6.7-rc6
v6.7-rc7
v6.7-rc8
v6.8
v6.8-rc1
v6.8-rc2
v6.8-rc3
v6.8-rc4
v6.8-rc5
v6.8-rc6
v6.8-rc7
v6.9
v6.9-rc1
v6.9-rc2
v6.9-rc3
v6.9-rc4
v6.9-rc5
v6.9-rc6
v6.9-rc7

Database specific

vanir_signatures

[
    {
        "signature_type": "Function",
        "deprecated": false,
        "source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@2777a40998deb36f96b6afc48bd397cf58a4edf0",
        "signature_version": "v1",
        "target": {
            "function": "vf_qm_check_match",
            "file": "drivers/vfio/pci/hisilicon/hisi_acc_vfio_pci.c"
        },
        "digest": {
            "function_hash": "124512508196097693464275214584615428847",
            "length": 1273.0
        },
        "id": "CVE-2025-38283-00c86e8e"
    },
    {
        "signature_type": "Function",
        "deprecated": false,
        "source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@2777a40998deb36f96b6afc48bd397cf58a4edf0",
        "signature_version": "v1",
        "target": {
            "function": "vf_qm_load_data",
            "file": "drivers/vfio/pci/hisilicon/hisi_acc_vfio_pci.c"
        },
        "digest": {
            "function_hash": "119276354498047614481309061456994001428",
            "length": 906.0
        },
        "id": "CVE-2025-38283-2613fe28"
    },
    {
        "signature_type": "Function",
        "deprecated": false,
        "source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@59a834592dd200969fdf3c61be1cb0615c647e45",
        "signature_version": "v1",
        "target": {
            "function": "vf_qm_check_match",
            "file": "drivers/vfio/pci/hisilicon/hisi_acc_vfio_pci.c"
        },
        "digest": {
            "function_hash": "124512508196097693464275214584615428847",
            "length": 1273.0
        },
        "id": "CVE-2025-38283-3919d366"
    },
    {
        "signature_type": "Line",
        "deprecated": false,
        "source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@2777a40998deb36f96b6afc48bd397cf58a4edf0",
        "signature_version": "v1",
        "target": {
            "file": "drivers/vfio/pci/hisilicon/hisi_acc_vfio_pci.c"
        },
        "digest": {
            "threshold": 0.9,
            "line_hashes": [
                "131447158733728428107354510836574893865",
                "2490427505184781352577864227425323150",
                "4651960269341652223193797499898310302",
                "191699157539673550492212730704083824325",
                "283796148768237460641158352941645611612",
                "282768185682815820968867698978657398629",
                "135045049023384241235195559403495709599",
                "312518424192019791224942111478419465476",
                "247848316050221079622071453630908992714",
                "104242887370943500216917434737265215703",
                "183860256411186011249601579038811492964",
                "217633190586059716841743651610050577391",
                "77454058927316512239146980641264508481",
                "52638214540823874971624883112866871386",
                "249734503543729824387614277739321640751",
                "45317352557572173151718388554966761473"
            ]
        },
        "id": "CVE-2025-38283-44c46406"
    },
    {
        "signature_type": "Function",
        "deprecated": false,
        "source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@b5ef128926cd34dffa2a66607b9c82b902581ef8",
        "signature_version": "v1",
        "target": {
            "function": "vf_qm_load_data",
            "file": "drivers/vfio/pci/hisilicon/hisi_acc_vfio_pci.c"
        },
        "digest": {
            "function_hash": "119276354498047614481309061456994001428",
            "length": 906.0
        },
        "id": "CVE-2025-38283-4aaf31cd"
    },
    {
        "signature_type": "Function",
        "deprecated": false,
        "source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@53e8e8e909f7c3a77857d09d2b733a42547f57ee",
        "signature_version": "v1",
        "target": {
            "function": "vf_qm_check_match",
            "file": "drivers/vfio/pci/hisilicon/hisi_acc_vfio_pci.c"
        },
        "digest": {
            "function_hash": "124512508196097693464275214584615428847",
            "length": 1273.0
        },
        "id": "CVE-2025-38283-58a5b40c"
    },
    {
        "signature_type": "Function",
        "deprecated": false,
        "source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@53e8e8e909f7c3a77857d09d2b733a42547f57ee",
        "signature_version": "v1",
        "target": {
            "function": "vf_qm_load_data",
            "file": "drivers/vfio/pci/hisilicon/hisi_acc_vfio_pci.c"
        },
        "digest": {
            "function_hash": "119276354498047614481309061456994001428",
            "length": 906.0
        },
        "id": "CVE-2025-38283-6b087df3"
    },
    {
        "signature_type": "Function",
        "deprecated": false,
        "source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@2777a40998deb36f96b6afc48bd397cf58a4edf0",
        "signature_version": "v1",
        "target": {
            "function": "hisi_acc_vfio_pci_migrn_init_dev",
            "file": "drivers/vfio/pci/hisilicon/hisi_acc_vfio_pci.c"
        },
        "digest": {
            "function_hash": "214305839058861691718948560490393496560",
            "length": 468.0
        },
        "id": "CVE-2025-38283-779dc276"
    },
    {
        "signature_type": "Function",
        "deprecated": false,
        "source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@b5ef128926cd34dffa2a66607b9c82b902581ef8",
        "signature_version": "v1",
        "target": {
            "function": "vf_qm_check_match",
            "file": "drivers/vfio/pci/hisilicon/hisi_acc_vfio_pci.c"
        },
        "digest": {
            "function_hash": "124512508196097693464275214584615428847",
            "length": 1273.0
        },
        "id": "CVE-2025-38283-87551245"
    },
    {
        "signature_type": "Function",
        "deprecated": false,
        "source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@59a834592dd200969fdf3c61be1cb0615c647e45",
        "signature_version": "v1",
        "target": {
            "function": "hisi_acc_vfio_pci_migrn_init_dev",
            "file": "drivers/vfio/pci/hisilicon/hisi_acc_vfio_pci.c"
        },
        "digest": {
            "function_hash": "317136995575932840960093177753765704771",
            "length": 566.0
        },
        "id": "CVE-2025-38283-a8993c4e"
    },
    {
        "signature_type": "Line",
        "deprecated": false,
        "source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@53e8e8e909f7c3a77857d09d2b733a42547f57ee",
        "signature_version": "v1",
        "target": {
            "file": "drivers/vfio/pci/hisilicon/hisi_acc_vfio_pci.c"
        },
        "digest": {
            "threshold": 0.9,
            "line_hashes": [
                "131447158733728428107354510836574893865",
                "2490427505184781352577864227425323150",
                "4651960269341652223193797499898310302",
                "191699157539673550492212730704083824325",
                "283796148768237460641158352941645611612",
                "282768185682815820968867698978657398629",
                "135045049023384241235195559403495709599",
                "312518424192019791224942111478419465476",
                "247848316050221079622071453630908992714",
                "104242887370943500216917434737265215703",
                "183860256411186011249601579038811492964",
                "217633190586059716841743651610050577391",
                "77454058927316512239146980641264508481",
                "52638214540823874971624883112866871386",
                "249734503543729824387614277739321640751",
                "45317352557572173151718388554966761473"
            ]
        },
        "id": "CVE-2025-38283-b38b02c6"
    },
    {
        "signature_type": "Function",
        "deprecated": false,
        "source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@59a834592dd200969fdf3c61be1cb0615c647e45",
        "signature_version": "v1",
        "target": {
            "function": "vf_qm_load_data",
            "file": "drivers/vfio/pci/hisilicon/hisi_acc_vfio_pci.c"
        },
        "digest": {
            "function_hash": "119276354498047614481309061456994001428",
            "length": 906.0
        },
        "id": "CVE-2025-38283-b3db9d4d"
    },
    {
        "signature_type": "Function",
        "deprecated": false,
        "source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@53e8e8e909f7c3a77857d09d2b733a42547f57ee",
        "signature_version": "v1",
        "target": {
            "function": "hisi_acc_vfio_pci_migrn_init_dev",
            "file": "drivers/vfio/pci/hisilicon/hisi_acc_vfio_pci.c"
        },
        "digest": {
            "function_hash": "214305839058861691718948560490393496560",
            "length": 468.0
        },
        "id": "CVE-2025-38283-c9a26bca"
    },
    {
        "signature_type": "Line",
        "deprecated": false,
        "source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@b5ef128926cd34dffa2a66607b9c82b902581ef8",
        "signature_version": "v1",
        "target": {
            "file": "drivers/vfio/pci/hisilicon/hisi_acc_vfio_pci.c"
        },
        "digest": {
            "threshold": 0.9,
            "line_hashes": [
                "131447158733728428107354510836574893865",
                "2490427505184781352577864227425323150",
                "4651960269341652223193797499898310302",
                "191699157539673550492212730704083824325",
                "283796148768237460641158352941645611612",
                "282768185682815820968867698978657398629",
                "135045049023384241235195559403495709599",
                "312518424192019791224942111478419465476",
                "247848316050221079622071453630908992714",
                "104242887370943500216917434737265215703",
                "183860256411186011249601579038811492964",
                "217633190586059716841743651610050577391",
                "77454058927316512239146980641264508481",
                "52638214540823874971624883112866871386",
                "150934557233798934904995968557280508346",
                "148910822311504765590570376732062645640"
            ]
        },
        "id": "CVE-2025-38283-d3bdb8c2"
    },
    {
        "signature_type": "Function",
        "deprecated": false,
        "source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@b5ef128926cd34dffa2a66607b9c82b902581ef8",
        "signature_version": "v1",
        "target": {
            "function": "hisi_acc_vfio_pci_migrn_init_dev",
            "file": "drivers/vfio/pci/hisilicon/hisi_acc_vfio_pci.c"
        },
        "digest": {
            "function_hash": "317136995575932840960093177753765704771",
            "length": 566.0
        },
        "id": "CVE-2025-38283-ddab716c"
    },
    {
        "signature_type": "Line",
        "deprecated": false,
        "source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@59a834592dd200969fdf3c61be1cb0615c647e45",
        "signature_version": "v1",
        "target": {
            "file": "drivers/vfio/pci/hisilicon/hisi_acc_vfio_pci.c"
        },
        "digest": {
            "threshold": 0.9,
            "line_hashes": [
                "131447158733728428107354510836574893865",
                "2490427505184781352577864227425323150",
                "4651960269341652223193797499898310302",
                "191699157539673550492212730704083824325",
                "283796148768237460641158352941645611612",
                "282768185682815820968867698978657398629",
                "135045049023384241235195559403495709599",
                "312518424192019791224942111478419465476",
                "247848316050221079622071453630908992714",
                "104242887370943500216917434737265215703",
                "183860256411186011249601579038811492964",
                "217633190586059716841743651610050577391",
                "77454058927316512239146980641264508481",
                "52638214540823874971624883112866871386",
                "150934557233798934904995968557280508346",
                "148910822311504765590570376732062645640"
            ]
        },
        "id": "CVE-2025-38283-ebc35094"
    }
]

Linux / Kernel

Package

Name
Kernel

Affected ranges

Type
ECOSYSTEM
Events
Introduced
5.18.0
Fixed
6.6.94
Type
ECOSYSTEM
Events
Introduced
6.7.0
Fixed
6.12.34
Type
ECOSYSTEM
Events
Introduced
6.13.0
Fixed
6.15.3