CVE-2025-38251: debian debian_linux NULL Pointer Dereference
CVSS: 5.5v3.1MediumAnalyzed
AliasesUBUNTU-CVE-2025-38251DEBIAN-CVE-2025-38251
Published 09-07-2025Last modified 11-05-2026
Vulnerability summary
CVE-2025-38251 is a medium (CVSS 5.5) NULL Pointer Dereference vulnerability in debian debian_linux. EPSS estimates a 0.18% chance of exploitation in the next 30 days, higher than 6.9% of scored vulnerabilities.
CVSS score
5.5/10
010
Medium · v3.1 (NVD)EPSS score
0.18%
0%100%
Low · +0.02 pp in 30 daysKEVNot listedIn no KEV catalog
RansomwareNone recordedNo known use recorded
Public exploits0No public exploits recorded
Advisory lineage
Upstream 0 · Downstream 52 · Related 47DLA-4327-1DLA-4328-1DSA-5973-1MGASA-2025-0218MGASA-2025-0219OPENSUSE-SU-2025:20081-1SUSE-SU-2025:03272-1SUSE-SU-2025:03290-1SUSE-SU-2025:03301-1SUSE-SU-2025:03382-1SUSE-SU-2025:03602-1SUSE-SU-2025:03633-1SUSE-SU-2025:03634-1SUSE-SU-2025:20653-1SUSE-SU-2025:20669-1SUSE-SU-2025:20739-1SUSE-SU-2025:20756-1SUSE-SU-2025:21074-1SUSE-SU-2025:21139-1SUSE-SU-2025:21179-1SUSE-SU-2026:20560-1USN-7774-1USN-7774-2USN-7774-3USN-7774-4USN-7774-5USN-7775-1USN-7775-2USN-7775-3USN-7776-1USN-7833-1USN-7833-2USN-7833-3USN-7833-4USN-7834-1USN-7856-1USN-8028-1USN-8028-2USN-8028-3USN-8028-4USN-8028-5USN-8028-6USN-8028-7USN-8028-8USN-8031-1USN-8031-2USN-8031-3USN-8052-1USN-8052-2USN-8074-1USN-8074-2USN-8126-1
Timeline
- 09-07-2025PublishedVulnerability first disclosed.
- 11-05-2026Last modifiedVulnerability information updated.
Description
In the Linux kernel, the following vulnerability has been resolved: atm: clip: prevent NULL deref in clip_push() Blamed commit missed that vcc_destroy_socket() calls clip_push() with a NULL skb. If clip_devs is NULL, clip_push() then crashes when reading skb->truesize.
CVSS metrics
3 scores · 3 sources · 1 versionMedium 5.5Preferred score · NVD (NIST)
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:HSourcesAll 3 agree
- OSV · UbuntuEcosystem advisory · calculated5.5MediumCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
- OSV · DebianEcosystem advisory · calculated5.5MediumCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
EPSS trend
Probability
0.18%
Chance of exploitation in the next 30 days
Percentile
7%
Versus all other CVEs
30-day change
+0.02 pp
From 0.16% on 19-09-2026
19-09-202619-10-2026
EPSS score0.18%
Known exploited
Compare KEV catalogsNot in any of the 3 tracked catalogs.
Public exploits
0 foundNo public exploits indexed.
Weaknesses
CWE · root causeAffected systems
Ubuntu134 products
- linux< 5.15.0-156.166 | < 6.8.0-100.100
- linux-allwinner-5.19All versions (No fix recorded)
- linux-aws< 5.15.0-1092.99 | < 6.8.0-1046.49
- linux-aws-5.0All versions (No fix recorded)
- linux-aws-5.11All versions (No fix recorded)
Debian2 products
- linux< 6.1.147-1 | < 6.12.37-1
- debian_linuxEOL11.0
Linux2 products
- linux≥ 93a2014afbace907178afc3c9c1e62c9a338595a, < 41f6420ee845006354c004839fed07da71e34aee | ≥ 93a2014afbace907178afc3c9c1e62c9a338595a, < 9199e8cb75f13a1650adcb3c6cad42789c43884e | ≥ 93a2014afbace907178afc3c9c1e62c9a338595a, < 88c88f91f4b3563956bb52e7a71a3640f7ece157 | ≥ 93a2014afbace907178afc3c9c1e62c9a338595a, < 3c709dce16999bf6a1d2ce377deb5dd6fdd8cb08 | ≥ 93a2014afbace907178afc3c9c1e62c9a338595a, < a07005a77b18ae59b8471e7e4d991fa9f642b3c2 | ≥ 93a2014afbace907178afc3c9c1e62c9a338595a, < ede31ad949ae0d03cb4c5edd79991586ad7c8bb8 | ≥ 93a2014afbace907178afc3c9c1e62c9a338595a, < b993ea46b3b601915ceaaf3c802adf11e7d6bac6 | 5.7
- linux_kernel≥ 5.7.1, < 5.10.240 | ≥ 5.11, < 5.15.187 | ≥ 5.16, < 6.1.143 | ≥ 6.2, < 6.6.96 | ≥ 6.7, < 6.12.36 | ≥ 6.13, < 6.15.5 | 5.7 | 5.7:rc5 | 5.7:rc6 | 5.7:rc7 | 6.16:rc1 | 6.16:rc2 | 6.16:rc3
3 vendors · 138 products