Critical DMA Address Error in Linux Kernel Affecting Debian Packages
Summary
CVE-2025-38158: In the Linux kernel, the following vulnerability has been resolved: hisi_acc_vfio_pci: fix XQE dma address error The dma addresses of EQE and AEQE are wrong after migration and results in guest kernel-mode encryption ser... Affects linux versions < 6.1.147-1. Fixed in 6.1.147-1. How to fix ↓
Check if this vulnerability affects your application
Upload a manifest or SBOM and we'll show whether you're affected, plus every other risky package in the same scan.
No signup required · Results in about 60 seconds
Habilume
Habit tracker with a companion that grows with you
Complete habits, earn Lume Points, and watch your Lume grow as you stay consistent.
Background
The Linux kernel is the core component of the Linux operating system, responsible for managing hardware resources and providing essential services to applications. It is widely used across various distributions, including Debian. This vulnerability specifically affects Debian versions 12 and 13, where incorrect DMA addresses can lead to failures in guest kernel-mode encryption services during migration.
Vulnerability Detail
In the Linux kernel, a vulnerability has been identified in the hisi_acc_vfio_pci component, where the DMA addresses for EQE and AEQE become incorrect after migration. This issue arises from an error in the sequence used to combine data read from hardware registers into an address. As a result, guest systems running older kernel versions may experience data corruption when migrated to newer kernels. The vulnerability can lead to significant security risks, including unauthorized access to sensitive data and system instability.
How To Fix
Minimum fixed version
6.1.147-1
This is the first release that contains the fix.
sudo apt-get install --only-upgrade linuxTip — Not sure which version your app runs? Vulert can match this fix to it. Scan free →
Workaround
Currently, there are no specific workarounds mentioned for this vulnerability. However, it is advisable to avoid migrating guest systems from older kernel versions to newer ones until the patch is applied.
Conclusion
The CVE-2025-38158 vulnerability in the Linux kernel poses significant risks to systems running Debian versions 12 and 13. It is crucial for users to update their packages to the latest versions to ensure system security and stability. Monitoring tools like Vulert can help identify vulnerabilities in real-time.
See every vulnerability recorded for linux →
FAQ
CVE-2025-38158 is a vulnerability in the Linux kernel that affects the handling of DMA addresses during migration, potentially leading to data corruption.
Debian versions 12 and 13 are affected by this vulnerability.
You can use Vulert's playground at Vulert Scanner to check if your application is affected by this vulnerability without needing to sign up.
The risks include potential unauthorized access to sensitive data and system instability due to incorrect DMA address handling.
Yes, a patch is available. Users should update their Linux packages to the latest versions to mitigate the vulnerability.
Related vulnerabilities
Recent vulnerabilities recorded for linux.
Habilume
Habit tracker with a companion that grows with you
Complete habits, earn Lume Points, and watch your Lume grow as you stay consistent.
