Close Menu
    DevStackTipsDevStackTips
    • Home
    • News & Updates
      1. Tech & Work
      2. View All

      Mirantis reveals Lens Prism, an AI copilot for operating Kubernetes clusters

      July 3, 2025

      Avoid these common platform engineering mistakes

      July 3, 2025

      Full-Stack Techies vs Toptal: Which Is Better for React.js Outsourcing?

      July 3, 2025

      The AI productivity paradox in software engineering: Balancing efficiency and human skill retention

      July 2, 2025

      Microsoft Gaming studios head Matt Booty says “overall portfolio strategy is unchanged” — with more than 40 games in production

      July 3, 2025

      Capcom reports that its Steam game sales have risen massively — despite flagship titles like Monster Hunter Wilds receiving profuse backlash from PC players

      July 3, 2025

      Cloudflare is fighting to safeguard “the future of the web itself” — standing directly in the way of leading AI firms

      July 3, 2025

      Microsoft reportedly lacks the know-how to fully leverage OpenAI’s tech — despite holding IP rights

      July 3, 2025
    • Development
      1. Algorithms & Data Structures
      2. Artificial Intelligence
      3. Back-End Development
      4. Databases
      5. Front-End Development
      6. Libraries & Frameworks
      7. Machine Learning
      8. Security
      9. Software Engineering
      10. Tools & IDEs
      11. Web Design
      12. Web Development
      13. Web Security
      14. Programming Languages
        • PHP
        • JavaScript
      Featured

      PHP 8.5.0 Alpha 1 available for testing

      July 3, 2025
      Recent

      PHP 8.5.0 Alpha 1 available for testing

      July 3, 2025

      Recording cross browser compatible media

      July 3, 2025

      Celebrating Perficient’s Third Databricks Champion

      July 3, 2025
    • Operating Systems
      1. Windows
      2. Linux
      3. macOS
      Featured

      Microsoft Gaming studios head Matt Booty says “overall portfolio strategy is unchanged” — with more than 40 games in production

      July 3, 2025
      Recent

      Microsoft Gaming studios head Matt Booty says “overall portfolio strategy is unchanged” — with more than 40 games in production

      July 3, 2025

      Capcom reports that its Steam game sales have risen massively — despite flagship titles like Monster Hunter Wilds receiving profuse backlash from PC players

      July 3, 2025

      Cloudflare is fighting to safeguard “the future of the web itself” — standing directly in the way of leading AI firms

      July 3, 2025
    • Learning Resources
      • Books
      • Cheatsheets
      • Tutorials & Guides
    Home»Security»Common Vulnerabilities and Exposures (CVEs)»CVE-2025-38158 – Hisi Acc VFio PCI DMA Address Error Vulnerability

    CVE-2025-38158 – Hisi Acc VFio PCI DMA Address Error Vulnerability

    July 3, 2025

    CVE ID : CVE-2025-38158

    Published : July 3, 2025, 9:15 a.m. | 2 hours, 14 minutes ago

    Description : In the Linux kernel, the following vulnerability has been resolved:

    hisi_acc_vfio_pci: fix XQE dma address error

    The dma addresses of EQE and AEQE are wrong after migration and
    results in guest kernel-mode encryption services failure.
    Comparing the definition of hardware registers, we found that
    there was an error when the data read from the register was
    combined into an address. Therefore, the address combination
    sequence needs to be corrected.

    Even after fixing the above problem, we still have an issue
    where the Guest from an old kernel can get migrated to
    new kernel and may result in wrong data.

    In order to ensure that the address is correct after migration,
    if an old magic number is detected, the dma address needs to be
    updated.

    Severity: 0.0 | NA

    Visit the link for more details, such as CVSS details, affected products, timeline, and more…

    Source: Read More

    Facebook Twitter Reddit Email Copy Link
    Previous ArticleCVE-2025-38159 – “RTW88 WiFi Out-of-Bounds Read”
    Next Article CVE-2025-38157 – “Qualcomm ath9k_htc USB WMI Out-of-Bounds Read/Write”

    Related Posts

    Security

    Critical Lucee Flaw (CVE-2025-34074, CVSS 9.4): Authenticated RCE Via Scheduled Task Abuse, Metasploit Module Out

    July 3, 2025
    Security

    Exposed JDWP Debug Ports Under Attack: Cryptominers Infiltrating Java Apps in Hours

    July 3, 2025
    Leave A Reply Cancel Reply

    For security, use of Google's reCAPTCHA service is required which is subject to the Google Privacy Policy and Terms of Use.

    Continue Reading

    CVE-2025-25045 – IBM InfoSphere Information Server Information Disclosure

    Common Vulnerabilities and Exposures (CVEs)

    CVE-2025-27528 – Apache InLong Deserialization of Untrusted Data Remote File Read Vulnerability

    Common Vulnerabilities and Exposures (CVEs)

    Microsoft dev explains why Windows taskbar clock with seconds was avoided

    Operating Systems

    Why the road from passwords to passkeys is long, bumpy, and worth it – probably

    News & Updates

    Highlights

    CVE-2025-47959 – Visual Studio Command Injection Vulnerability

    June 13, 2025

    CVE ID : CVE-2025-47959

    Published : June 13, 2025, 2:15 a.m. | 3 hours, 48 minutes ago

    Description : Improper neutralization of special elements used in a command (‘command injection’) in Visual Studio allows an authorized attacker to execute code over a network.

    Severity: 7.1 | HIGH

    Visit the link for more details, such as CVSS details, affected products, timeline, and more…

    Microsoft quietly implies Windows has LOST millions of users since Windows 11 debut — are people really abandoning ship?

    July 1, 2025

    CVE-2025-47952 – Traefik Path Traversal Vulnerability

    May 30, 2025

    CVE-2025-47279 – Undici SSL Certificate Invalid Memory Leak

    May 15, 2025
    © DevStackTips 2025. All rights reserved.
    • Contact
    • Privacy Policy

    Type above and press Enter to search. Press Esc to cancel.