In the Linux kernel, the following vulnerability has been resolved:
atm: clip: Fix memory leak of struct clip_vcc.
ioctl(ATMARPMKIP) allocates struct clipvcc and set it to vcc->user_back.
The code assumes that vccdestroysocket() passes NULL skb to vcc->push() when the socket is close()d, and then clippush() frees clipvcc.
However, ioctl(ATMARPDCTRL) sets NULL to vcc->push() in atminit_atmarp(), resulting in memory leak.
Let's serialise two ioctl() by locksock() and check vcc->push() in atminit_atmarp() to prevent memleak.
[
{
"digest": {
"function_hash": "121739817266769151327297189308003072764",
"length": 511.0
},
"target": {
"file": "net/atm/clip.c",
"function": "atm_init_atmarp"
},
"signature_type": "Function",
"signature_version": "v1",
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@9f771816f14da6d6157a8c30069091abf6b566fb",
"id": "CVE-2025-38546-0a7aeb70",
"deprecated": false
},
{
"digest": {
"threshold": 0.9,
"line_hashes": [
"315549152173859537858969232855590588219",
"69957319739987523103900388710200508342",
"322375212986737818154443346685749877718",
"38274068973864169891200118683536363075",
"3538384888415475944508637690251192746",
"155883975710497918075114199331086080690",
"226548360768416143032036880685140076218",
"95120378623222396912063625089681738691",
"291824799044801963510119389365704934940",
"50950085962139646019276833734616577890",
"97374071211484672294949730690526014401",
"215392293134497733039597835954899497078",
"192813796275781035456423188595069954099",
"316768771679787647169332365340176565963",
"309883551458841701841416739683084766975",
"325847352192048028318292889207145414980",
"21417445553227406518535636918787581441",
"96121727732759359106079355067918964295",
"210132223777405900355644215356683340320",
"218608725313461883481232114731542268919"
]
},
"target": {
"file": "net/atm/clip.c"
},
"signature_type": "Line",
"signature_version": "v1",
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@9e4dbeee56f614e3f1e166e5d0655a999ea185ef",
"id": "CVE-2025-38546-0bc0063f",
"deprecated": false
},
{
"digest": {
"function_hash": "121739817266769151327297189308003072764",
"length": 511.0
},
"target": {
"file": "net/atm/clip.c",
"function": "atm_init_atmarp"
},
"signature_type": "Function",
"signature_version": "v1",
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@2fb37ab3226606cbfc9b2b6f9e301b0b735734c5",
"id": "CVE-2025-38546-0c89ae96",
"deprecated": false
},
{
"digest": {
"threshold": 0.9,
"line_hashes": [
"315549152173859537858969232855590588219",
"69957319739987523103900388710200508342",
"322375212986737818154443346685749877718",
"38274068973864169891200118683536363075",
"3538384888415475944508637690251192746",
"155883975710497918075114199331086080690",
"226548360768416143032036880685140076218",
"95120378623222396912063625089681738691",
"291824799044801963510119389365704934940",
"50950085962139646019276833734616577890",
"97374071211484672294949730690526014401",
"215392293134497733039597835954899497078",
"192813796275781035456423188595069954099",
"316768771679787647169332365340176565963",
"309883551458841701841416739683084766975",
"325847352192048028318292889207145414980",
"21417445553227406518535636918787581441",
"96121727732759359106079355067918964295",
"210132223777405900355644215356683340320",
"218608725313461883481232114731542268919"
]
},
"target": {
"file": "net/atm/clip.c"
},
"signature_type": "Line",
"signature_version": "v1",
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@2fb37ab3226606cbfc9b2b6f9e301b0b735734c5",
"id": "CVE-2025-38546-13677ceb",
"deprecated": false
},
{
"digest": {
"threshold": 0.9,
"line_hashes": [
"315549152173859537858969232855590588219",
"69957319739987523103900388710200508342",
"322375212986737818154443346685749877718",
"38274068973864169891200118683536363075",
"3538384888415475944508637690251192746",
"155883975710497918075114199331086080690",
"226548360768416143032036880685140076218",
"95120378623222396912063625089681738691",
"291824799044801963510119389365704934940",
"50950085962139646019276833734616577890",
"97374071211484672294949730690526014401",
"215392293134497733039597835954899497078",
"192813796275781035456423188595069954099",
"316768771679787647169332365340176565963",
"309883551458841701841416739683084766975",
"325847352192048028318292889207145414980",
"21417445553227406518535636918787581441",
"96121727732759359106079355067918964295",
"210132223777405900355644215356683340320",
"218608725313461883481232114731542268919"
]
},
"target": {
"file": "net/atm/clip.c"
},
"signature_type": "Line",
"signature_version": "v1",
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@62dba28275a9a3104d4e33595c7b3328d4032d8d",
"id": "CVE-2025-38546-19e0da0a",
"deprecated": false
},
{
"digest": {
"function_hash": "121739817266769151327297189308003072764",
"length": 511.0
},
"target": {
"file": "net/atm/clip.c",
"function": "atm_init_atmarp"
},
"signature_type": "Function",
"signature_version": "v1",
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@0c17ff462d98c997d707ee5cf4e4a9b1b52b9d90",
"id": "CVE-2025-38546-2e964943",
"deprecated": false
},
{
"digest": {
"function_hash": "127299291173998514629684295488319140838",
"length": 766.0
},
"target": {
"file": "net/atm/clip.c",
"function": "clip_ioctl"
},
"signature_type": "Function",
"signature_version": "v1",
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@1fb9fb5a4b5cec2d56e26525ef8c519de858fa60",
"id": "CVE-2025-38546-493f5028",
"deprecated": false
},
{
"digest": {
"function_hash": "121739817266769151327297189308003072764",
"length": 511.0
},
"target": {
"file": "net/atm/clip.c",
"function": "atm_init_atmarp"
},
"signature_type": "Function",
"signature_version": "v1",
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@9e4dbeee56f614e3f1e166e5d0655a999ea185ef",
"id": "CVE-2025-38546-4f40b0ba",
"deprecated": false
},
{
"digest": {
"function_hash": "127299291173998514629684295488319140838",
"length": 766.0
},
"target": {
"file": "net/atm/clip.c",
"function": "clip_ioctl"
},
"signature_type": "Function",
"signature_version": "v1",
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@cb2e4a2f8f268d8fba6662f663a2e57846f14a8d",
"id": "CVE-2025-38546-50698e7d",
"deprecated": false
},
{
"digest": {
"function_hash": "127299291173998514629684295488319140838",
"length": 766.0
},
"target": {
"file": "net/atm/clip.c",
"function": "clip_ioctl"
},
"signature_type": "Function",
"signature_version": "v1",
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@2fb37ab3226606cbfc9b2b6f9e301b0b735734c5",
"id": "CVE-2025-38546-5c61aaaa",
"deprecated": false
},
{
"digest": {
"function_hash": "127299291173998514629684295488319140838",
"length": 766.0
},
"target": {
"file": "net/atm/clip.c",
"function": "clip_ioctl"
},
"signature_type": "Function",
"signature_version": "v1",
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@9f771816f14da6d6157a8c30069091abf6b566fb",
"id": "CVE-2025-38546-5c9d09ba",
"deprecated": false
},
{
"digest": {
"threshold": 0.9,
"line_hashes": [
"315549152173859537858969232855590588219",
"69957319739987523103900388710200508342",
"322375212986737818154443346685749877718",
"38274068973864169891200118683536363075",
"3538384888415475944508637690251192746",
"155883975710497918075114199331086080690",
"226548360768416143032036880685140076218",
"95120378623222396912063625089681738691",
"291824799044801963510119389365704934940",
"50950085962139646019276833734616577890",
"97374071211484672294949730690526014401",
"215392293134497733039597835954899497078",
"192813796275781035456423188595069954099",
"316768771679787647169332365340176565963",
"309883551458841701841416739683084766975",
"325847352192048028318292889207145414980",
"21417445553227406518535636918787581441",
"96121727732759359106079355067918964295",
"210132223777405900355644215356683340320",
"218608725313461883481232114731542268919"
]
},
"target": {
"file": "net/atm/clip.c"
},
"signature_type": "Line",
"signature_version": "v1",
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@1fb9fb5a4b5cec2d56e26525ef8c519de858fa60",
"id": "CVE-2025-38546-5f32f5eb",
"deprecated": false
},
{
"digest": {
"threshold": 0.9,
"line_hashes": [
"315549152173859537858969232855590588219",
"69957319739987523103900388710200508342",
"322375212986737818154443346685749877718",
"38274068973864169891200118683536363075",
"3538384888415475944508637690251192746",
"155883975710497918075114199331086080690",
"226548360768416143032036880685140076218",
"95120378623222396912063625089681738691",
"291824799044801963510119389365704934940",
"50950085962139646019276833734616577890",
"97374071211484672294949730690526014401",
"215392293134497733039597835954899497078",
"192813796275781035456423188595069954099",
"316768771679787647169332365340176565963",
"309883551458841701841416739683084766975",
"325847352192048028318292889207145414980",
"21417445553227406518535636918787581441",
"96121727732759359106079355067918964295",
"210132223777405900355644215356683340320",
"218608725313461883481232114731542268919"
]
},
"target": {
"file": "net/atm/clip.c"
},
"signature_type": "Line",
"signature_version": "v1",
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@cb2e4a2f8f268d8fba6662f663a2e57846f14a8d",
"id": "CVE-2025-38546-62b28685",
"deprecated": false
},
{
"digest": {
"function_hash": "127299291173998514629684295488319140838",
"length": 766.0
},
"target": {
"file": "net/atm/clip.c",
"function": "clip_ioctl"
},
"signature_type": "Function",
"signature_version": "v1",
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@0c17ff462d98c997d707ee5cf4e4a9b1b52b9d90",
"id": "CVE-2025-38546-8db19065",
"deprecated": false
},
{
"digest": {
"threshold": 0.9,
"line_hashes": [
"315549152173859537858969232855590588219",
"69957319739987523103900388710200508342",
"322375212986737818154443346685749877718",
"38274068973864169891200118683536363075",
"3538384888415475944508637690251192746",
"155883975710497918075114199331086080690",
"226548360768416143032036880685140076218",
"95120378623222396912063625089681738691",
"291824799044801963510119389365704934940",
"50950085962139646019276833734616577890",
"97374071211484672294949730690526014401",
"215392293134497733039597835954899497078",
"192813796275781035456423188595069954099",
"316768771679787647169332365340176565963",
"309883551458841701841416739683084766975",
"325847352192048028318292889207145414980",
"21417445553227406518535636918787581441",
"96121727732759359106079355067918964295",
"210132223777405900355644215356683340320",
"218608725313461883481232114731542268919"
]
},
"target": {
"file": "net/atm/clip.c"
},
"signature_type": "Line",
"signature_version": "v1",
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@1c075e88d5859a2c6b43b27e0e46fb281cef8039",
"id": "CVE-2025-38546-976daebe",
"deprecated": false
},
{
"digest": {
"function_hash": "127299291173998514629684295488319140838",
"length": 766.0
},
"target": {
"file": "net/atm/clip.c",
"function": "clip_ioctl"
},
"signature_type": "Function",
"signature_version": "v1",
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@9e4dbeee56f614e3f1e166e5d0655a999ea185ef",
"id": "CVE-2025-38546-98735722",
"deprecated": false
},
{
"digest": {
"function_hash": "121739817266769151327297189308003072764",
"length": 511.0
},
"target": {
"file": "net/atm/clip.c",
"function": "atm_init_atmarp"
},
"signature_type": "Function",
"signature_version": "v1",
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@1c075e88d5859a2c6b43b27e0e46fb281cef8039",
"id": "CVE-2025-38546-9b481316",
"deprecated": false
},
{
"digest": {
"function_hash": "121739817266769151327297189308003072764",
"length": 511.0
},
"target": {
"file": "net/atm/clip.c",
"function": "atm_init_atmarp"
},
"signature_type": "Function",
"signature_version": "v1",
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@cb2e4a2f8f268d8fba6662f663a2e57846f14a8d",
"id": "CVE-2025-38546-a1473068",
"deprecated": false
},
{
"digest": {
"function_hash": "121739817266769151327297189308003072764",
"length": 511.0
},
"target": {
"file": "net/atm/clip.c",
"function": "atm_init_atmarp"
},
"signature_type": "Function",
"signature_version": "v1",
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@1fb9fb5a4b5cec2d56e26525ef8c519de858fa60",
"id": "CVE-2025-38546-aa651d4a",
"deprecated": false
},
{
"digest": {
"threshold": 0.9,
"line_hashes": [
"315549152173859537858969232855590588219",
"69957319739987523103900388710200508342",
"322375212986737818154443346685749877718",
"38274068973864169891200118683536363075",
"3538384888415475944508637690251192746",
"155883975710497918075114199331086080690",
"226548360768416143032036880685140076218",
"95120378623222396912063625089681738691",
"291824799044801963510119389365704934940",
"50950085962139646019276833734616577890",
"97374071211484672294949730690526014401",
"215392293134497733039597835954899497078",
"192813796275781035456423188595069954099",
"316768771679787647169332365340176565963",
"309883551458841701841416739683084766975",
"325847352192048028318292889207145414980",
"21417445553227406518535636918787581441",
"96121727732759359106079355067918964295",
"210132223777405900355644215356683340320",
"218608725313461883481232114731542268919"
]
},
"target": {
"file": "net/atm/clip.c"
},
"signature_type": "Line",
"signature_version": "v1",
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@0c17ff462d98c997d707ee5cf4e4a9b1b52b9d90",
"id": "CVE-2025-38546-bf27026d",
"deprecated": false
},
{
"digest": {
"function_hash": "127299291173998514629684295488319140838",
"length": 766.0
},
"target": {
"file": "net/atm/clip.c",
"function": "clip_ioctl"
},
"signature_type": "Function",
"signature_version": "v1",
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@62dba28275a9a3104d4e33595c7b3328d4032d8d",
"id": "CVE-2025-38546-d44d6df1",
"deprecated": false
},
{
"digest": {
"function_hash": "127299291173998514629684295488319140838",
"length": 766.0
},
"target": {
"file": "net/atm/clip.c",
"function": "clip_ioctl"
},
"signature_type": "Function",
"signature_version": "v1",
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@1c075e88d5859a2c6b43b27e0e46fb281cef8039",
"id": "CVE-2025-38546-da8be934",
"deprecated": false
},
{
"digest": {
"threshold": 0.9,
"line_hashes": [
"315549152173859537858969232855590588219",
"69957319739987523103900388710200508342",
"322375212986737818154443346685749877718",
"38274068973864169891200118683536363075",
"3538384888415475944508637690251192746",
"155883975710497918075114199331086080690",
"226548360768416143032036880685140076218",
"95120378623222396912063625089681738691",
"291824799044801963510119389365704934940",
"50950085962139646019276833734616577890",
"97374071211484672294949730690526014401",
"215392293134497733039597835954899497078",
"192813796275781035456423188595069954099",
"316768771679787647169332365340176565963",
"309883551458841701841416739683084766975",
"325847352192048028318292889207145414980",
"21417445553227406518535636918787581441",
"96121727732759359106079355067918964295",
"210132223777405900355644215356683340320",
"218608725313461883481232114731542268919"
]
},
"target": {
"file": "net/atm/clip.c"
},
"signature_type": "Line",
"signature_version": "v1",
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@9f771816f14da6d6157a8c30069091abf6b566fb",
"id": "CVE-2025-38546-dcc910e1",
"deprecated": false
},
{
"digest": {
"function_hash": "121739817266769151327297189308003072764",
"length": 511.0
},
"target": {
"file": "net/atm/clip.c",
"function": "atm_init_atmarp"
},
"signature_type": "Function",
"signature_version": "v1",
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@62dba28275a9a3104d4e33595c7b3328d4032d8d",
"id": "CVE-2025-38546-f56b2cab",
"deprecated": false
}
]