CVE-2025-38460: 
Linux Kernel vulnerability analysis and mitigation

CVE-2025-38460 is a vulnerability discovered in the Linux kernel, specifically affecting the ATM CLIP (Classical IP over ATM) subsystem. The vulnerability was disclosed on July 25, 2025, and involves a potential null pointer dereference in the to_atmarpd() function (NVD).

The vulnerability stems from insufficient protection of the atmarpd component in the Linux kernel's ATM CLIP implementation. While atmarpd is protected by RTNL (Route Netlink) since commit f3a0592b37b8, this protection is inadequate because toatmarpd() is called without RTNL, particularly in clipneighsolicit() / neighops->solicit() which is unsleepable. Additionally, there is no RTNL dependency around atmarpd. The issue was addressed by implementing a private mutex and RCU to protect access to atmarpd in to_atmarpd() (NVD).

The vulnerability could lead to a null pointer dereference in the Linux kernel's ATM subsystem, potentially causing system crashes or denial of service conditions (Ubuntu).

The vulnerability has been addressed in the Linux kernel by implementing proper protection mechanisms using a private mutex and RCU (Read-Copy-Update) for accessing atmarpd in the to_atmarpd() function. Users are advised to update their systems to patched versions when available (NVD).