CVE-2025-38459 — Uncontrolled Recursion in Linux
CWE-674 — Uncontrolled RecursionCWE-787 — Out-of-bounds WriteCWE-835 — Infinite Loop66 documents8 sources
Severity
7.8HIGHNVD
OSV3.2
EPSS
0.0%
top 95.00%
CISA KEV
Not in KEV
Exploit
No known exploits
Affected products
Timeline
PublishedJul 25
Latest updateMar 25
Description
In the Linux kernel, the following vulnerability has been resolved:
atm: clip: Fix infinite recursive call of clip_push().
syzbot reported the splat below. [0]
This happens if we call ioctl(ATMARP_MKIP) more than once.
During the first call, clip_mkip() sets clip_push() to vcc->push(),
and the second call copies it to clip_vcc->old_push().
Later, when the socket is close()d, vcc_destroy_socket() passes
NULL skb to clip_push(), which calls clip_vcc->old_push(),
triggering the infinite recurs…
CVSS vector
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:HExploitability: 1.8 | Impact: 5.9
Affected Packages4 packages
▶CVEListV5linux/linux1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 — f493f31a63847624fd3199ac836a8bd8828e50e2+8
Also affects: Debian Linux 11.0