{"affected":[{"defaultStatus":"unaffected","product":"Linux","source":"CNA: Linux","vendor":"Linux","versions":[{"lessThan":"41f6420ee845006354c004839fed07da71e34aee","status":"affected","version":"93a2014afbace907178afc3c9c1e62c9a338595a","versionType":"git"},{"lessThan":"9199e8cb75f13a1650adcb3c6cad42789c43884e","status":"affected","version":"93a2014afbace907178afc3c9c1e62c9a338595a","versionType":"git"},{"lessThan":"88c88f91f4b3563956bb52e7a71a3640f7ece157","status":"affected","version":"93a2014afbace907178afc3c9c1e62c9a338595a","versionType":"git"},{"lessThan":"3c709dce16999bf6a1d2ce377deb5dd6fdd8cb08","status":"affected","version":"93a2014afbace907178afc3c9c1e62c9a338595a","versionType":"git"},{"lessThan":"a07005a77b18ae59b8471e7e4d991fa9f642b3c2","status":"affected","version":"93a2014afbace907178afc3c9c1e62c9a338595a","versionType":"git"},{"lessThan":"ede31ad949ae0d03cb4c5edd79991586ad7c8bb8","status":"affected","version":"93a2014afbace907178afc3c9c1e62c9a338595a","versionType":"git"},{"lessThan":"b993ea46b3b601915ceaaf3c802adf11e7d6bac6","status":"affected","version":"93a2014afbace907178afc3c9c1e62c9a338595a","versionType":"git"}]},{"defaultStatus":"affected","product":"Linux","source":"CNA: Linux","vendor":"Linux","versions":[{"status":"affected","version":"5.7"},{"lessThan":"5.7","status":"unaffected","version":"0","versionType":"semver"},{"lessThanOrEqual":"5.10.*","status":"unaffected","version":"5.10.240","versionType":"semver"},{"lessThanOrEqual":"5.15.*","status":"unaffected","version":"5.15.187","versionType":"semver"},{"lessThanOrEqual":"6.1.*","status":"unaffected","version":"6.1.143","versionType":"semver"},{"lessThanOrEqual":"6.6.*","status":"unaffected","version":"6.6.96","versionType":"semver"},{"lessThanOrEqual":"6.12.*","status":"unaffected","version":"6.12.36","versionType":"semver"},{"lessThanOrEqual":"6.15.*","status":"unaffected","version":"6.15.5","versionType":"semver"},{"lessThanOrEqual":"*","status":"unaffected","version":"6.16","versionType":"original_commit_for_fix"}]}],"cveId":"CVE-2025-38251","cwes":[],"description":"In the Linux kernel, the following vulnerability has been resolved:\n\natm: clip: prevent NULL deref in clip_push()\n\nBlamed commit missed that vcc_destroy_socket() calls\nclip_push() with a NULL skb.\n\nIf clip_devs is NULL, clip_push() then crashes when reading\nskb->truesize.","epss":{"date":"2026-11-05","percentile":0.07583,"score":0.00179},"exploits":[],"kev":null,"metrics":[],"modifiedAt":1793912549163,"publishedAt":1752057750877,"references":[{"source":"CNA: Linux","tags":[],"url":"https://git.kernel.org/stable/c/41f6420ee845006354c004839fed07da71e34aee"},{"source":"CNA: Linux","tags":[],"url":"https://git.kernel.org/stable/c/9199e8cb75f13a1650adcb3c6cad42789c43884e"},{"source":"CNA: Linux","tags":[],"url":"https://git.kernel.org/stable/c/88c88f91f4b3563956bb52e7a71a3640f7ece157"},{"source":"CNA: Linux","tags":[],"url":"https://git.kernel.org/stable/c/3c709dce16999bf6a1d2ce377deb5dd6fdd8cb08"},{"source":"CNA: Linux","tags":[],"url":"https://git.kernel.org/stable/c/a07005a77b18ae59b8471e7e4d991fa9f642b3c2"},{"source":"CNA: Linux","tags":[],"url":"https://git.kernel.org/stable/c/ede31ad949ae0d03cb4c5edd79991586ad7c8bb8"},{"source":"CNA: Linux","tags":[],"url":"https://git.kernel.org/stable/c/b993ea46b3b601915ceaaf3c802adf11e7d6bac6"},{"source":"ADP: CVE","tags":[],"url":"https://lists.debian.org/debian-lts-announce/2025/10/msg00008.html"},{"source":"ADP: CVE","tags":[],"url":"https://lists.debian.org/debian-lts-announce/2025/10/msg00007.html"}],"remediation":[],"revision":"682f9d102c94da7880a64c8c5b72499a781a816be1db6f23d42c5e035c757374","sources":[{"modifiedAt":1793912549163,"name":"CNA: Linux","retrievedAt":1793913627057,"url":"https://www.cve.org/CVERecord?id=CVE-2025-38251"},{"modifiedAt":null,"name":"FIRST EPSS","retrievedAt":1793913633936,"url":"https://api.first.org/data/v1/epss?cve=CVE-2025-38251"}],"ssvc":{"assessedAt":1793911939666,"automatable":"no","exploitation":"none","source":"ADP: CISA-ADP","technicalImpact":"partial"},"status":"published","title":"atm: clip: prevent NULL deref in clip_push()","updatedAt":1793913633936}