CVE-2025-38460
CVE.org · Published
- Record status
- Published
- Identifier year (not publication year)
- 2025
- Source publication
- Source updated
- Imported by cveboard
- Source snapshot
- cve_2026-10-24_midnight_baseline ·
CNA source text (English)
atm: clip: Fix potential null-ptr-deref in to_atmarpd().
In the Linux kernel, the following vulnerability has been resolved: atm: clip: Fix potential null-ptr-deref in to_atmarpd(). atmarpd is protected by RTNL since commit f3a0592b37b8 ("[ATM]: clip causes unregister hang"). However, it is not enough because to_atmarpd() is called without RTNL, especially clip_neigh_solicit() / neigh_ops->solicit() is unsleepable. Also, there is no RTNL dependency around atmarpd. Let's use a private mutex and RCU to protect access to atmarpd in to_atmarpd().
Scoped product and version facts
Fix information unknown; no fixed version is derived here. Missing information does not prove that no fix exists.
Exploitation unknown; this catalogue does not assess exploitation.
Linux
- Vendor
- Linux
- Product
- Linux
- Platforms
- Unknown
- Default status
unaffected
| Version (version) | Status (status) | Version scheme (versionType) | Exclusive end (lessThan) | Inclusive end (lessThanOrEqual) | Status changes (at → status) |
|---|---|---|---|---|---|
| 1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 | affected | git | a4c5785feb979cd996a99cfaad8bf353b2e79301 | Unavailable | None listed |
| 1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 | affected | git | 70eac9ba7ce25d99c1d99bbf4ddb058940f631f9 | Unavailable | None listed |
| 1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 | affected | git | 3251ce3979f41bd228f77a7615f9dd616d06a110 | Unavailable | None listed |
| 1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 | affected | git | ee4d9e4ddf3f9c4ee2ec0a3aad6196ee36d30e57 | Unavailable | None listed |
| 1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 | affected | git | 06935c50cfa3ac57cce80bba67b6d38ec1406e92 | Unavailable | None listed |
| 1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 | affected | git | 36caab990b69ef4eec1d81c52a19f080b7daa059 | Unavailable | None listed |
| 1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 | affected | git | f58e4270c73e7f086322978d585ea67c8076ce49 | Unavailable | None listed |
| 1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 | affected | git | 706cc36477139c1616a9b2b96610a8bb520b7119 | Unavailable | None listed |
Linux
- Vendor
- Linux
- Product
- Linux
- Platforms
- Unknown
- Default status
affected
| Version (version) | Status (status) | Version scheme (versionType) | Exclusive end (lessThan) | Inclusive end (lessThanOrEqual) | Status changes (at → status) |
|---|---|---|---|---|---|
| 2.6.12 | affected | Unavailable | Unavailable | Unavailable | None listed |
| 0 | unaffected | semver | 2.6.12 | Unavailable | None listed |
| 5.4.296 | unaffected | semver | Unavailable | 5.4.* | None listed |
| 5.10.240 | unaffected | semver | Unavailable | 5.10.* | None listed |
| 5.15.189 | unaffected | semver | Unavailable | 5.15.* | None listed |
| 6.1.146 | unaffected | semver | Unavailable | 6.1.* | None listed |
| 6.6.99 | unaffected | semver | Unavailable | 6.6.* | None listed |
| 6.12.39 | unaffected | semver | Unavailable | 6.12.* | None listed |
| 6.15.7 | unaffected | semver | Unavailable | 6.15.* | None listed |
| 6.16 | unaffected | original_commit_for_fix | Unavailable | * | None listed |