Detections
Analytics

Echo: linux: security update to 6.1.147-1

medium Tenable Cloud Security Plugin ID 463245

Description

There are packages installed that are affected by a vulnerability referenced in the following CVE:

 - In the Linux kernel, the following vulnerability has been resolved: hisi_acc_vfio_pci: fix XQE dma address
 error The dma addresses of EQE and AEQE are wrong after migration and results in guest kernel-mode
 encryption services failure. Comparing the definition of hardware registers, we found that there was an
 error when the data read from the register was combined into an address. Therefore, the address
 combination sequence needs to be corrected. Even after fixing the above problem, we still have an issue
 where the Guest from an old kernel can get migrated to new kernel and may result in wrong data. In order
 to ensure that the address is correct after migration, if an old magic number is detected, the dma address
 needs to be updated. (CVE-2025-38158)

Solution

Update the linux library and its related packages to version 6.1.147-1 or later.

See Also

https://advisory.echohq.com/cve/CVE-2025-38158

Plugin Details

Severity: Medium

ID: 463245

Version: Revision 1.1

Type: Local

Published: 10/2/2026

Updated: 10/2/2026

Risk Information

VPR

Risk Factor: Low

Score: 3

Percentile: 23.35

CVSS v2

Risk Factor: Medium

Base Score: 4.6

Temporal Score: 3.4

Vector: CVSS2#AV:L/AC:L/Au:S/C:N/I:N/A:C

CVSS Score Source: CVE-2025-38158

CVSS v3

Risk Factor: Medium

Base Score: 5.5

Temporal Score: 4.8

Vector: CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

Temporal Vector: CVSS:3.0/E:U/RL:O/RC:C

Vulnerability Information

Exploit Ease: No known exploits are available

Patch Publication Date: 9/15/2025

Vulnerability Publication Date: 7/3/2025

Reference Information

CVE: CVE-2025-38158