---
id: CVE-2025-38283
title: 'hisi_acc_vfio_pci: bugfix live migration function without VF device driver'
summary: |-
  In the Linux kernel, the following vulnerability has been resolved:

  hisi_acc_vfio_pci: bugfix live migration function without VF device driver

  If the VF device driver is not loaded in the Guest OS and we attempt to
  perform device data …
severity: high
cvss: 8.8
cvssVector: 'CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H'
cvssSource: cna
vendor: Linux
product: Linux
affected:
  - >-
    Linux >= b0eed085903e7758532696d64397901a75bba8ba <
    4bbc4db69264d4d38a6340d9751fb213943346d3
  - >-
    Linux >= b0eed085903e7758532696d64397901a75bba8ba <
    b5ef128926cd34dffa2a66607b9c82b902581ef8
  - >-
    Linux >= b0eed085903e7758532696d64397901a75bba8ba <
    59a834592dd200969fdf3c61be1cb0615c647e45
  - >-
    Linux >= b0eed085903e7758532696d64397901a75bba8ba <
    53e8e8e909f7c3a77857d09d2b733a42547f57ee
  - >-
    Linux >= b0eed085903e7758532696d64397901a75bba8ba <
    2777a40998deb36f96b6afc48bd397cf58a4edf0
  - Linux 5.18
published: '2025-07-10'
updated: '2026-10-30'
sourceUpdated: '2026-10-30T12:21:54.251Z'
source: CVEORG
sourceUrl: 'https://www.cve.org/CVERecord?id=CVE-2025-38283'
references:
  - url: 'https://git.kernel.org/stable/c/4bbc4db69264d4d38a6340d9751fb213943346d3'
  - url: 'https://git.kernel.org/stable/c/b5ef128926cd34dffa2a66607b9c82b902581ef8'
  - url: 'https://git.kernel.org/stable/c/59a834592dd200969fdf3c61be1cb0615c647e45'
  - url: 'https://git.kernel.org/stable/c/53e8e8e909f7c3a77857d09d2b733a42547f57ee'
  - url: 'https://git.kernel.org/stable/c/2777a40998deb36f96b6afc48bd397cf58a4edf0'
tags:
  - cve.org
epss: 0.002
epssPercentile: 0.09979
ingestedAt: '2026-11-03T18:52:04.084Z'
---

## Overview

In the Linux kernel, the following vulnerability has been resolved:

hisi_acc_vfio_pci: bugfix live migration function without VF device driver

If the VF device driver is not loaded in the Guest OS and we attempt to
perform device data migration, the address of the migrated data will
be NULL.
The live migration recovery operation on the destination side will
access a null address value, which will cause access errors.

Therefore, live migration of VMs without added VF device drivers
does not require device data migration.
In addition, when the queue address data obtained by the destination
is empty, device queue recovery processing will not be performed.

## Affected

- `Linux >= b0eed085903e7758532696d64397901a75bba8ba < 4bbc4db69264d4d38a6340d9751fb213943346d3`
- `Linux >= b0eed085903e7758532696d64397901a75bba8ba < b5ef128926cd34dffa2a66607b9c82b902581ef8`
- `Linux >= b0eed085903e7758532696d64397901a75bba8ba < 59a834592dd200969fdf3c61be1cb0615c647e45`
- `Linux >= b0eed085903e7758532696d64397901a75bba8ba < 53e8e8e909f7c3a77857d09d2b733a42547f57ee`
- `Linux >= b0eed085903e7758532696d64397901a75bba8ba < 2777a40998deb36f96b6afc48bd397cf58a4edf0`
- `Linux 5.18`

## Remediation

Refer to the linked advisories for vendor-supplied fixes and affected version ranges.