CVE-2025-38460

MediumCVSS 5.5/10Last modified Oct 15, 2026

Description

In the Linux kernel, the following vulnerability has been resolved:

atm: clip: Fix potential null-ptr-deref in to_atmarpd().

atmarpd is protected by RTNL since commit f3a0592b37b8 ("[ATM]: clip causes unregister hang").

However, it is not enough because to_atmarpd() is called without RTNL, especially clip_neigh_solicit() / neigh_ops->solicit() is unsleepable.

Also, there is no RTNL dependency around atmarpd.

Let's use a private mutex and RCU to protect access to atmarpd in to_atmarpd().

Metrics

CVSS 3.1 5.5/10CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

Weakness enumeration

CWE-476

Affected software

VendorProductVersions
LinuxLinux>= 1da177e4c3f41524e886b7f1b8a0c1fc7321cac2, < a4c5785feb979cd996a99cfaad8bf353b2e79301; >= 1da177e4c3f41524e886b7f1b8a0c1fc7321cac2, < 70eac9ba7ce25d99c1d99bbf4ddb058940f631f9; >= 1da177e4c3f41524e886b7f1b8a0c1fc7321cac2, < 3251ce3979f41bd228f77a7615f9dd616d06a110; >= 1da177e4c3f41524e886b7f1b8a0c1fc7321cac2, < ee4d9e4ddf3f9c4ee2ec0a3aad6196ee36d30e57; >= 1da177e4c3f41524e886b7f1b8a0c1fc7321cac2, < 06935c50cfa3ac57cce80bba67b6d38ec1406e92; >= 1da177e4c3f41524e886b7f1b8a0c1fc7321cac2, < 36caab990b69ef4eec1d81c52a19f080b7daa059; >= 1da177e4c3f41524e886b7f1b8a0c1fc7321cac2, < f58e4270c73e7f086322978d585ea67c8076ce49; >= 1da177e4c3f41524e886b7f1b8a0c1fc7321cac2, < 706cc36477139c1616a9b2b96610a8bb520b7119
LinuxLinux2.6.12

References

Timeline

Published
Jul 25, 2025
Last modified
Oct 15, 2026
NVD status
Modified

Related CVEs from 2025

CVE-2025-384614.7In the Linux kernel, the following vulnerability has been resolved: vsock: Fix transport_* TOCTOU Transport assignment may race with modulCVE-2025-384624.7In the Linux kernel, the following vulnerability has been resolved: vsock: Fix transport_{g2h,h2g} TOCTOU vsock_find_cid() and vsock_dev_dCVE-2025-384635.5In the Linux kernel, the following vulnerability has been resolved: tcp: Correct signedness in skb remaining space calculation Syzkaller rCVE-2025-384647.8In the Linux kernel, the following vulnerability has been resolved: tipc: Fix use-after-free in tipc_conn_close(). syzbot reported a null-CVE-2025-384655.5In the Linux kernel, the following vulnerability has been resolved: netlink: Fix wraparounds of sk->sk_rmem_alloc. Netlink has this patterCVE-2025-384665.5In the Linux kernel, the following vulnerability has been resolved: perf: Revert to requiring CAP_SYS_ADMIN for uprobes Jann reports that CVE-2025-384675.5In the Linux kernel, the following vulnerability has been resolved: drm/exynos: exynos7_drm_decon: add vblank check in IRQ handling If theCVE-2025-384685.5In the Linux kernel, the following vulnerability has been resolved: net/sched: Return NULL when htb_lookup_leaf encounters an empty rbtree CVE-2025-384695.5In the Linux kernel, the following vulnerability has been resolved: KVM: x86/xen: Fix cleanup logic in emulation of Xen schedop poll hypercCVE-2025-38479.8A vulnerability classified as critical has been found in markparticle WebServer up to 1.0. This affects an unknown part of the file code/httCVE-2025-384705.5In the Linux kernel, the following vulnerability has been resolved: net: vlan: fix VLAN 0 refcount imbalance of toggling filtering during rCVE-2025-384717.8In the Linux kernel, the following vulnerability has been resolved: tls: always refresh the queue when reading sock After recent changes i
CVE-2025-38460: Medium severity, CVSS 5.5 | Vulnix