CVE-2025-38251: atm: clip: prevent NULL deref in clip_push()
Published Jul 9, 2025
·Updated
atm: clip: prevent NULL deref in clippush()
Affected Software
18 affected componentsFixes available
Linux Linux kernel
Linux Linux kernel>=5.7.1<5.10.240
Linux Linux kernel>=5.11<5.15.187
Linux Linux kernel>=5.16<6.1.143
Linux Linux kernel>=6.2<6.6.96
Linux Linux kernel>=6.7<6.12.36
Linux Linux kernel>=6.13<6.15.5
Linux Linux kernel=5.7
Linux Linux kernel=5.7-rc5
Linux Linux kernel=5.7-rc6
Linux Linux kernel=5.7-rc7
Linux Linux kernel=6.16-rc1
Linux Linux kernel=6.16-rc2
Linux Linux kernel=6.16-rc3
Debian Debian Linux=11.0
Microsoft azl3 kernel 6.6.92.2-2
Microsoft cbl2 kernel 5.15.186.1-1
debian/linux
6.1.176-16.1.190-16.12.107-16.12.113-17.2.12-17.2.13-1
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade
debian/linuxto a version that resolves this vulnerability.Fixed in 6.1.176-1Fixed in 6.1.190-1Fixed in 6.12.107-1Fixed in 6.12.113-1Fixed in 7.2.12-1Fixed in 7.2.13-1
Event History
Jul 9, 2025
CVE Published
via MITRE·10:42 AM
Data Sourced
via MITRE·10:42 AM
Description
Data Sourced
via NVD·11:15 AM
RemedyDescriptionSeverityWeaknessAffected Software
Aug 7, 2025
Data Sourced
via Microsoft·07:00 AM
DescriptionSeverityWeaknessAffected Software
Frequently Asked Questions
1
What is the severity of CVE-2025-38251?
CVE-2025-38251 has a severity rating that could lead to a system crash due to a NULL dereference in clip_push().
2
How do I fix CVE-2025-38251?
To fix CVE-2025-38251, you should update your Linux kernel to the latest stable version that includes the patch for this vulnerability.
3
What software is affected by CVE-2025-38251?
CVE-2025-38251 affects the Linux kernel specifically through the ATM subsystem.
4
What is the potential impact of CVE-2025-38251?
The potential impact of CVE-2025-38251 includes crashes and instability in systems using the affected Linux kernel.
5
When was CVE-2025-38251 published?
CVE-2025-38251 was identified and published as a vulnerability after its discovery related to the clip_push() function.