CVE-2025-38251

Description

In the Linux kernel, the following vulnerability has been resolved: atm: clip: prevent NULL deref in clip_push() Blamed commit missed that vcc_destroy_socket() calls clip_push() with a NULL skb. If clip_devs is NULL, clip_push() then crashes when reading skb->truesize.

Reserved 2025-04-16 | Published 2025-07-09 | Updated 2025-07-10 | Assigner Linux

Product status

Default status
unaffected

93a2014afbace907178afc3c9c1e62c9a338595a before 9199e8cb75f13a1650adcb3c6cad42789c43884e
affected

93a2014afbace907178afc3c9c1e62c9a338595a before 88c88f91f4b3563956bb52e7a71a3640f7ece157
affected

93a2014afbace907178afc3c9c1e62c9a338595a before 3c709dce16999bf6a1d2ce377deb5dd6fdd8cb08
affected

93a2014afbace907178afc3c9c1e62c9a338595a before a07005a77b18ae59b8471e7e4d991fa9f642b3c2
affected

93a2014afbace907178afc3c9c1e62c9a338595a before ede31ad949ae0d03cb4c5edd79991586ad7c8bb8
affected

93a2014afbace907178afc3c9c1e62c9a338595a before b993ea46b3b601915ceaaf3c802adf11e7d6bac6
affected

Default status
affected

5.7
affected

Any version before 5.7
unaffected

5.15.187
unaffected

6.1.143
unaffected

6.6.96
unaffected

6.12.36
unaffected

6.15.5
unaffected

6.16-rc4
unaffected

References

git.kernel.org/...c/9199e8cb75f13a1650adcb3c6cad42789c43884e

git.kernel.org/...c/88c88f91f4b3563956bb52e7a71a3640f7ece157

git.kernel.org/...c/3c709dce16999bf6a1d2ce377deb5dd6fdd8cb08

git.kernel.org/...c/a07005a77b18ae59b8471e7e4d991fa9f642b3c2

git.kernel.org/...c/ede31ad949ae0d03cb4c5edd79991586ad7c8bb8

git.kernel.org/...c/b993ea46b3b601915ceaaf3c802adf11e7d6bac6

cve.org (CVE-2025-38251)

nvd.nist.gov (CVE-2025-38251)

Download JSON