CVE-2025-38251

MediumCVSS 5.5/10Last modified Nov 5, 2026

Description

In the Linux kernel, the following vulnerability has been resolved:

atm: clip: prevent NULL deref in clip_push()

Blamed commit missed that vcc_destroy_socket() calls clip_push() with a NULL skb.

If clip_devs is NULL, clip_push() then crashes when reading skb->truesize.

Metrics

CVSS 3.1 5.5/10CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

Weakness enumeration

CWE-476

Affected software

VendorProductVersions
LinuxLinux>= 93a2014afbace907178afc3c9c1e62c9a338595a, < 41f6420ee845006354c004839fed07da71e34aee; >= 93a2014afbace907178afc3c9c1e62c9a338595a, < 9199e8cb75f13a1650adcb3c6cad42789c43884e; >= 93a2014afbace907178afc3c9c1e62c9a338595a, < 88c88f91f4b3563956bb52e7a71a3640f7ece157; >= 93a2014afbace907178afc3c9c1e62c9a338595a, < 3c709dce16999bf6a1d2ce377deb5dd6fdd8cb08; >= 93a2014afbace907178afc3c9c1e62c9a338595a, < a07005a77b18ae59b8471e7e4d991fa9f642b3c2; >= 93a2014afbace907178afc3c9c1e62c9a338595a, < ede31ad949ae0d03cb4c5edd79991586ad7c8bb8; >= 93a2014afbace907178afc3c9c1e62c9a338595a, < b993ea46b3b601915ceaaf3c802adf11e7d6bac6
LinuxLinux5.7

References

Timeline

Published
Jul 9, 2025
Last modified
Nov 5, 2026
NVD status
Analyzed

Related CVEs from 2025

CVE-2025-382525.5In the Linux kernel, the following vulnerability has been resolved: cxl/ras: Fix CPER handler device confusion By inspection, cxl_cper_hanCVE-2025-382535.5In the Linux kernel, the following vulnerability has been resolved: HID: wacom: fix crash in wacom_aes_battery_handler() Commit fd2a9b29dcCVE-2025-382545.5In the Linux kernel, the following vulnerability has been resolved: drm/amd/display: Add sanity checks for drm_edid_raw() When EDID is retCVE-2025-382555.5In the Linux kernel, the following vulnerability has been resolved: lib/group_cpus: fix NULL pointer dereference from group_cpus_evenly() CVE-2025-382565.5In the Linux kernel, the following vulnerability has been resolved: io_uring/rsrc: fix folio unpinning syzbot complains about an unmappingCVE-2025-382577.8In the Linux kernel, the following vulnerability has been resolved: s390/pkey: Prevent overflow in size calculation for memdup_user() NumbCVE-2025-382585.5In the Linux kernel, the following vulnerability has been resolved: mm/damon/sysfs-schemes: free old damon_sysfs_scheme_filter->memcg_path CVE-2025-382597.8In the Linux kernel, the following vulnerability has been resolved: ASoC: codecs: wcd9335: Fix missing free of regulator supplies Driver gCVE-2025-38264.1A vulnerability, which was classified as problematic, was found in SourceCodester Web-based Pharmacy Product Management System 1.0. This affCVE-2025-382605.5In the Linux kernel, the following vulnerability has been resolved: btrfs: handle csum tree error with rescue=ibadroots correctly [BUG] ThCVE-2025-382615.5In the Linux kernel, the following vulnerability has been resolved: riscv: save the SR_SUM status over switches When threads/tasks are swiCVE-2025-382625.5In the Linux kernel, the following vulnerability has been resolved: tty: serial: uartlite: register uart driver in init When two instances
CVE-2025-38251: Medium severity, CVSS 5.5 | Vulnix