---
id: CVE-2025-38251
title: 'atm: clip: prevent NULL deref in clip_push()'
summary: |-
  In the Linux kernel, the following vulnerability has been resolved:

  atm: clip: prevent NULL deref in clip_push()

  Blamed commit missed that vcc_destroy_socket() calls
  clip_push() with a NULL skb.

  If clip_devs is NULL, clip_push() then …
severity: none
vendor: Linux
product: Linux
affected:
  - >-
    Linux >= 93a2014afbace907178afc3c9c1e62c9a338595a <
    41f6420ee845006354c004839fed07da71e34aee
  - >-
    Linux >= 93a2014afbace907178afc3c9c1e62c9a338595a <
    9199e8cb75f13a1650adcb3c6cad42789c43884e
  - >-
    Linux >= 93a2014afbace907178afc3c9c1e62c9a338595a <
    88c88f91f4b3563956bb52e7a71a3640f7ece157
  - >-
    Linux >= 93a2014afbace907178afc3c9c1e62c9a338595a <
    3c709dce16999bf6a1d2ce377deb5dd6fdd8cb08
  - >-
    Linux >= 93a2014afbace907178afc3c9c1e62c9a338595a <
    a07005a77b18ae59b8471e7e4d991fa9f642b3c2
  - >-
    Linux >= 93a2014afbace907178afc3c9c1e62c9a338595a <
    ede31ad949ae0d03cb4c5edd79991586ad7c8bb8
  - >-
    Linux >= 93a2014afbace907178afc3c9c1e62c9a338595a <
    b993ea46b3b601915ceaaf3c802adf11e7d6bac6
  - Linux 5.7
ssvc:
  exploitation: none
  automatable: 'no'
  technicalImpact: partial
  timestamp: '2026-11-05T20:52:19.666627Z'
published: '2025-07-09'
updated: '2026-11-05'
sourceUpdated: '2026-11-05T21:02:29.163Z'
source: CVEORG
sourceUrl: 'https://www.cve.org/CVERecord?id=CVE-2025-38251'
references:
  - url: 'https://git.kernel.org/stable/c/41f6420ee845006354c004839fed07da71e34aee'
  - url: 'https://git.kernel.org/stable/c/9199e8cb75f13a1650adcb3c6cad42789c43884e'
  - url: 'https://git.kernel.org/stable/c/88c88f91f4b3563956bb52e7a71a3640f7ece157'
  - url: 'https://git.kernel.org/stable/c/3c709dce16999bf6a1d2ce377deb5dd6fdd8cb08'
  - url: 'https://git.kernel.org/stable/c/a07005a77b18ae59b8471e7e4d991fa9f642b3c2'
  - url: 'https://git.kernel.org/stable/c/ede31ad949ae0d03cb4c5edd79991586ad7c8bb8'
  - url: 'https://git.kernel.org/stable/c/b993ea46b3b601915ceaaf3c802adf11e7d6bac6'
tags:
  - cve.org
epss: 0.00178
epssPercentile: 0.0742
ingestedAt: '2026-11-05T22:38:31.941Z'
---

## Overview

In the Linux kernel, the following vulnerability has been resolved:

atm: clip: prevent NULL deref in clip_push()

Blamed commit missed that vcc_destroy_socket() calls
clip_push() with a NULL skb.

If clip_devs is NULL, clip_push() then crashes when reading
skb->truesize.

## Affected

- `Linux >= 93a2014afbace907178afc3c9c1e62c9a338595a < 41f6420ee845006354c004839fed07da71e34aee`
- `Linux >= 93a2014afbace907178afc3c9c1e62c9a338595a < 9199e8cb75f13a1650adcb3c6cad42789c43884e`
- `Linux >= 93a2014afbace907178afc3c9c1e62c9a338595a < 88c88f91f4b3563956bb52e7a71a3640f7ece157`
- `Linux >= 93a2014afbace907178afc3c9c1e62c9a338595a < 3c709dce16999bf6a1d2ce377deb5dd6fdd8cb08`
- `Linux >= 93a2014afbace907178afc3c9c1e62c9a338595a < a07005a77b18ae59b8471e7e4d991fa9f642b3c2`
- `Linux >= 93a2014afbace907178afc3c9c1e62c9a338595a < ede31ad949ae0d03cb4c5edd79991586ad7c8bb8`
- `Linux >= 93a2014afbace907178afc3c9c1e62c9a338595a < b993ea46b3b601915ceaaf3c802adf11e7d6bac6`
- `Linux 5.7`

## Remediation

Refer to the linked advisories for vendor-supplied fixes and affected version ranges.