NULL Pointer Dereference in Linux Kernel's ATM Component

CVE-2025-38458

What is CVE-2025-38458?

A vulnerability has been identified in the ATM component of the Linux kernel, specifically related to the handling of messages in the vcc_sendmsg function. This flaw could result in a NULL pointer dereference when the necessary send method is not properly implemented, leading to potential system crashes. It’s essential for system administrators and developers to apply available patches to mitigate this risk.

References