Listen to this Post
How the CVE Works
This vulnerability exists within the `hisi_acc_vfio_pci` driver of the Linux kernel, specifically affecting live migration of virtual machines using HiSilicon accelerator VF devices. The flaw is triggered when a VM is live-migrated to a destination host without the necessary Virtual Function (VF) device driver loaded in the guest OS. During a normal migration, device-specific data, including queue addresses, is transferred for recovery on the destination. However, if the VF driver is absent, the data structure intended to hold the migrated device data is never allocated, resulting in a NULL pointer. The migration recovery code on the destination side fails to check for this NULL condition and attempts to access this null address to perform device queue recovery. This direct dereferencing of a NULL pointer causes a kernel oops and a denial-of-service, crashing the VM during the migration process.
DailyCVE Form
Platform: Linux Kernel
Version: hisi_acc_vfio_pci driver
Vulnerability : NULL Pointer Dereference
Severity: Critical
date: 07/10/2025
Prediction: Patch expected by 07/24/2025
What Undercode Say:
Analytics
dmesg | grep "BUG:" cat /proc/modules | grep hisi_acc lsmod | grep vfio
How Exploit:
Live migrate a VM with an assigned HiSilicon VF device but without the corresponding VF driver loaded inside the guest OS. The migration process will trigger a kernel panic on the destination host.
Protection from this CVE
Patch the kernel.
Verify guest drivers.
Avoid migrating unprepared VMs.
Impact:
Kernel panic.
Denial-of-service.
Failed live migration.
🎯Let’s Practice Exploiting & Learn Patching For Free:
Sources:
Reported By: nvd.nist.gov
Extra Source Hub:
Undercode
