CVE-2025-38546

See a problem?
Please try reporting it to the source first.
Source
https://cve.org/CVERecord?id=CVE-2025-38546
Import Source
https://storage.googleapis.com/osv-test-cve-osv-conversion/osv-output/CVE-2025-38546.json
JSON Data
https://api.test.osv.dev/v1/vulns/CVE-2025-38546
Downstream
Related
Published
2025-08-16T11:22:20.477Z
Modified
2026-03-11T07:51:02.033007021Z
Summary
atm: clip: Fix memory leak of struct clip_vcc.
Details

In the Linux kernel, the following vulnerability has been resolved:

atm: clip: Fix memory leak of struct clip_vcc.

ioctl(ATMARPMKIP) allocates struct clipvcc and set it to vcc->user_back.

The code assumes that vccdestroysocket() passes NULL skb to vcc->push() when the socket is close()d, and then clippush() frees clipvcc.

However, ioctl(ATMARPDCTRL) sets NULL to vcc->push() in atminit_atmarp(), resulting in memory leak.

Let's serialise two ioctl() by locksock() and check vcc->push() in atminit_atmarp() to prevent memleak.

Database specific 
{
    "osv_generated_from": "https://github.com/CVEProject/cvelistV5/tree/main/cves/2025/38xxx/CVE-2025-38546.json",
    "cna_assigner": "Linux"
}
References

Affected packages

Git / git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git

Affected ranges

Type
GIT
Repo
https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git
Events
Introduced
1da177e4c3f41524e886b7f1b8a0c1fc7321cac2
Fixed
2fb37ab3226606cbfc9b2b6f9e301b0b735734c5
Fixed
9e4dbeee56f614e3f1e166e5d0655a999ea185ef
Fixed
1c075e88d5859a2c6b43b27e0e46fb281cef8039
Fixed
0c17ff462d98c997d707ee5cf4e4a9b1b52b9d90
Fixed
1fb9fb5a4b5cec2d56e26525ef8c519de858fa60
Fixed
9f771816f14da6d6157a8c30069091abf6b566fb
Fixed
cb2e4a2f8f268d8fba6662f663a2e57846f14a8d
Fixed
62dba28275a9a3104d4e33595c7b3328d4032d8d

Database specific

source 
"https://storage.googleapis.com/osv-test-cve-osv-conversion/osv-output/CVE-2025-38546.json"