NetSight
IP …
medium5.5

CVE-2025-38251

In the Linux kernel, the following vulnerability has been resolved: atm: clip: prevent NULL deref in clip_push() Blamed commit missed that vcc_destroy_socket()…

Impact

In the Linux kernel, the following vulnerability has been resolved: atm: clip: prevent NULL deref in clip_push() Blamed commit missed that vcc_destroy_socket() calls clip_push() with a NULL skb. If clip_devs is NULL, clip_push() then crashes when reading skb->truesize.

Affected products

VendorProductAffected versions
LinuxLinux Kernel
from 5.7.1 before 5.10.240
from 5.11 before 5.15.187
from 5.16 before 6.1.143
from 6.2 before 6.6.96
from 6.7 before 6.12.36
from 6.13 before 6.15.5
DebianDebian Linux
Version 11.0

Weakness classification

CWE-476

References