CVE-2025-38546

In the Linux kernel, the following vulnerability has been resolved:<br /> <br /> atm: clip: Fix memory leak of struct clip_vcc.<br /> <br /> ioctl(ATMARP_MKIP) allocates struct clip_vcc and set it to<br /> vcc-&gt;user_back.<br /> <br /> The code assumes that vcc_destroy_socket() passes NULL skb<br /> to vcc-&gt;push() when the socket is close()d, and then clip_push()<br /> frees clip_vcc.<br /> <br /> However, ioctl(ATMARPD_CTRL) sets NULL to vcc-&gt;push() in<br /> atm_init_atmarp(), resulting in memory leak.<br /> <br /> Let&amp;#39;s serialise two ioctl() by lock_sock() and check vcc-&gt;push()<br /> in atm_init_atmarp() to prevent memleak.