VulnerabilityPublished 9 Jul 2025Updated 5 Nov 2026

CVE-2025-38251: Linux kernel · atm: clip: prevent NULL deref in clip_push()

Affects Linux kernelSource CVE Database V5

Compare

Not known to be exploited · fixed in ede31ad949ae0d03cb4c5edd79991586ad7c8bb8 : update Linux kernel when convenient.

Data as of 5 Nov 2026, 21:19 UTC

Severity

Unrated

Rated by Threat Radar · No CVSS score from NVD or the CNA

Thin evidence

One scorer or none

Exploitation: No evidence of active exploitation and no public proof of concept
Automatable: Attackers cannot reliably automate steps 1–4 of the kill chain
Technical impact: Limited control over the software or limited information exposure

CISA SSVC assessment, 2026-11-05.

Patch

Available – fixed in ede31ad949ae0d03cb4c5edd79991586ad7c8bb8, b993ea46b3b601915ceaaf3c802adf11e7d6bac6, a07005a77b18ae59b8471e7e4d991fa9f642b3c2 +4

Exploitation evidence

Disclosed: evidence found.
CVE published 9 Jul 2025
Detectable: no evidence on record.
No public nuclei template indexed
Weaponized: no evidence on record.
No public exploit code indexed in Metasploit or Exploit-DB
Exploited in the wildExploited: no evidence on record.
Not in CISA KEV and no source reports exploitation
Observed by OffSeq MirageSeen by Mirage: no evidence on record.
No attack traffic recorded by OffSeq Mirage sensors

A missing step is not evidence of safety. Sources: cve.org (opens in a new tab), the Metasploit, Exploit-DB and nuclei-templates index as of 5 Nov 2026.

Disclosed: The CVE record is public on cve.org. Its publication is t = 0.
Detectable: A public nuclei template can find exposed instances, for defenders and attackers alike.
Weaponized: A Metasploit exploit module or Exploit-DB entry exists (Metasploit scanner modules do not count), or CISA SSVC or the CVSS exploit maturity reports a public proof of concept.
Exploited in the wild: CISA KEV lists it, CISA SSVC rates exploitation active, or a source reports attacks.
Observed by OffSeq Mirage: OffSeq Mirage honeypot sensors recorded attack traffic for this CVE, or found exposed hosts without attack traffic.

Moments are spaced evenly, not to scale; a dashed line marks a gap of six months or more. Deltas count from t = 0. Sources that give only a date (CISA KEV, Exploit-DB, or a time of exactly 00:00Z) read “same day” rather than hours. Metasploit modules carry the flaw’s disclosure date, not their release date, and nuclei templates carry no date, so both appear above but not on the timeline.

What to do

Upgrade to a fixed release listed under Affected software.

Affected software

Product	Affected	Fixed in
LinuxLinux	Affected ≥ 93a2014afbace907178afc3c9c1e62c9a338595a, < ede31ad949ae0d03cb4c5edd79991586ad7c8bb8	Fixed in ede31ad949ae0d03cb4c5edd79991586ad7c8bb8
LinuxLinux	Affected ≥ 93a2014afbace907178afc3c9c1e62c9a338595a, < b993ea46b3b601915ceaaf3c802adf11e7d6bac6	Fixed in b993ea46b3b601915ceaaf3c802adf11e7d6bac6
LinuxLinux	Affected ≥ 93a2014afbace907178afc3c9c1e62c9a338595a, < a07005a77b18ae59b8471e7e4d991fa9f642b3c2	Fixed in a07005a77b18ae59b8471e7e4d991fa9f642b3c2
LinuxLinux	Affected ≥ 93a2014afbace907178afc3c9c1e62c9a338595a, < 9199e8cb75f13a1650adcb3c6cad42789c43884e	Fixed in 9199e8cb75f13a1650adcb3c6cad42789c43884e
LinuxLinux	Affected ≥ 93a2014afbace907178afc3c9c1e62c9a338595a, < 88c88f91f4b3563956bb52e7a71a3640f7ece157	Fixed in 88c88f91f4b3563956bb52e7a71a3640f7ece157
LinuxLinux	Affected ≥ 93a2014afbace907178afc3c9c1e62c9a338595a, < 41f6420ee845006354c004839fed07da71e34aee	Fixed in 41f6420ee845006354c004839fed07da71e34aee

Description

In the Linux kernel, the following vulnerability has been resolved: atm: clip: prevent NULL deref in clip_push() Blamed commit missed that vcc_destroy_socket() calls clip_push() with a NULL skb. If clip_devs is NULL, clip_push() then crashes when reading skb->truesize.

References

Community reviews

Loading reviews…