Linux Kernel NULL Dereference Vulnerability in ATM Clip Driver

CVE-2025-38251

What is CVE-2025-38251?

A vulnerability in the ATM clip driver of the Linux kernel allows a NULL dereference, potentially causing system crashes. This issue arises when the function clip_push() is called with a NULL socket buffer, leading to a failure in reading skb->truesize if the device list is also NULL. The flaw has been addressed in recent commits, ensuring enhanced stability and performance in handling ATM devices.

References