Riskcovery

CVE-2025-38251

atm: clip: prevent NULL deref in clip_push()

State
Published
Severity
Not scored
Published
Jul 9, 2025
Updated
May 11, 2026
Reserved
Apr 16, 2025

Read the record on cve.org

Description

In the Linux kernel, the following vulnerability has been resolved:

atm: clip: prevent NULL deref in clip_push()

Blamed commit missed that vcc_destroy_socket() calls clip_push() with a NULL skb.

If clip_devs is NULL, clip_push() then crashes when reading skb->truesize.

Scores

The record has no CVSS score.

Weaknesses

The record names no weakness.

Affected Products

ProductVersions
LinuxLinux
  • 93a2014afbace907178afc3c9c1e62c9a338595a to before 41f6420ee845006354c004839fed07da71e34aeeAffected
  • 93a2014afbace907178afc3c9c1e62c9a338595a to before 9199e8cb75f13a1650adcb3c6cad42789c43884eAffected
  • 93a2014afbace907178afc3c9c1e62c9a338595a to before 88c88f91f4b3563956bb52e7a71a3640f7ece157Affected
  • 93a2014afbace907178afc3c9c1e62c9a338595a to before 3c709dce16999bf6a1d2ce377deb5dd6fdd8cb08Affected
  • 93a2014afbace907178afc3c9c1e62c9a338595a to before a07005a77b18ae59b8471e7e4d991fa9f642b3c2Affected
  • 93a2014afbace907178afc3c9c1e62c9a338595a to before ede31ad949ae0d03cb4c5edd79991586ad7c8bb8Affected
  • 93a2014afbace907178afc3c9c1e62c9a338595a to before b993ea46b3b601915ceaaf3c802adf11e7d6bac6Affected
LinuxLinux
  • 5.7Affected
  • before 5.7Not affected
  • 5.10.240 through 5.10.*Not affected
  • 5.15.187 through 5.15.*Not affected
  • 6.1.143 through 6.1.*Not affected
  • 6.6.96 through 6.6.*Not affected
  • 6.12.36 through 6.12.*Not affected
  • 6.15.5 through 6.15.*Not affected
  • 6.16 and laterNot affected

References

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.