MEDIUM Published July 9, 2025

CVE-2025-38251

In the Linux kernel, the following vulnerability has been resolved: atm: clip: prevent NULL deref in clip_push() Blamed commit missed that vcc_destroy_socket() calls clip_push() with a NULL skb. If clip_devs is NULL, clip_push() then crashes when reading skb->truesize.

CVSS base score

5.5 (v3.1)

Severity

MEDIUM

Attack vector

Local

Weakness

CWE-476

Last modified

November 5, 2026

CVSS vector

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

Affected products

linux linux kernel debian debian linux

References

git.kernel.org Patch
git.kernel.org Patch
git.kernel.org Patch
git.kernel.org Patch
git.kernel.org Patch
git.kernel.org Patch
git.kernel.org Patch
lists.debian.org Mailing List, Third Party Advisory
lists.debian.org Mailing List, Third Party Advisory

View full NVD advisory →

More linux vulnerabilities

Published the same day

← Back to CVE watch

CVE-2025-38251

Affected products

References

More linux vulnerabilities

Published the same day

Related reading