NetSight
IP …
medium5.5

CVE-2025-38546

In the Linux kernel, the following vulnerability has been resolved: atm: clip: Fix memory leak of struct clip_vcc.

Impact

In the Linux kernel, the following vulnerability has been resolved: atm: clip: Fix memory leak of struct clip_vcc. ioctl(ATMARP_MKIP) allocates struct clip_vcc and set it to vcc->user_back. The code assumes that vcc_destroy_socket() passes NULL skb to vcc->push() when the socket is close()d, and then clip_push() frees clip_vcc. However, ioctl(ATMARPD_CTRL) sets NULL to vcc->push() in atm_init_atmarp(), resulting in memory leak. Let's serialise two ioctl() by lock_sock() and check vcc->push() in atm_init_atmarp() to prevent memleak.

Affected products

VendorProductAffected versions
LinuxLinux Kernel
from 2.6.13 before 5.4.296
from 5.5 before 5.10.240
from 5.11 before 5.15.189
from 5.16 before 6.1.146
from 6.2 before 6.6.99
from 6.7 before 6.12.39
DebianDebian Linux
Version 11.0

Weakness classification

CWE-401

References