Description
The clip_mkip function in net/atm/clip.c of the ATM subsystem in Linux kernel allows remote attackers to cause a denial of service (panic) via unknown vectors that cause the ATM subsystem to access the memory of socket buffers after they are freed (freed pointer dereference).
Fixed in Linux distributions
Distributions backport fixes, so the version that fixes this vulnerability differs per release — upgrade to at least the version shown. From the distributions' security trackers and advisories.
Debian
Security tracker ↗| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| Debian 3.1 | kernel-source-2.4.27 | 2.4.27-10sarge5 | DSA-1237-1 |
| Debian 3.1 | kernel-source-2.6.8 | 2.6.8-16sarge6 | DSA-1233-1 |
Red Hat
Security tracker ↗| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| RHEL 4 | kernel +8 | 2.6.9-42.0.3.EL | RHSA-2006:0689 |
| RHEL 3 | kernel +8 | 2.4.21-47.0.1.EL | RHSA-2006:0710 |
| RHEL 2 | kernel +8 | 2.4.9-e.71 | RHSA-2007:0013, RHSA-2007:0012 |
Advisories 6
- RHSA-2007:0013 Red Hat Security Advisory: kernel security update Red Hat Security Advisories (RHSA) · Jun 26, 2026
- RHSA-2006:0710 Red Hat Security Advisory: kernel security update Red Hat Security Advisories (RHSA) · Jun 26, 2026
- RHSA-2006:0689 Red Hat Security Advisory: kernel security update Red Hat Security Advisories (RHSA) · Jun 26, 2026
- DSA-1237-1 kernel-source-2.4.27 - several Debian Security (DSA / DLA) · Mar 9, 2026
- DSA-1233-1 kernel-source-2.6.8 - several Debian Security (DSA / DLA) · Mar 9, 2026
- RHSA-2007:0012 Red Hat Security Advisory: kernel security update Red Hat Security Advisories (RHSA) · Nov 22, 2025
References
- http://bugzilla.redhat.com/bugzilla/show_bug.cgi?id=206265
- 20363 vdb-entry
- MDKSA-2007:025 vendor-advisory
- SUSE-SA:2006:079 vendor-advisory
- 22253 third-party-advisory
- RHSA-2007:0012 vendor-advisory
- 22279 third-party-advisory
- 23788 third-party-advisory
- 22292 third-party-advisory
- RHSA-2007:0013 vendor-advisory
- RHSA-2006:0689 vendor-advisory
- MDKSA-2007:012 vendor-advisory
- 1017526 vdb-entry
- 23384 third-party-advisory
- http://www.kernel.org/git/?p=linux/kernel/git/torvalds/linux-2.6.git%3Ba=commit%3Bh=fe26109a9dfd9327fdbe630fc819e1b7450986b2
- 23752 third-party-advisory
- DSA-1237 vendor-advisory
- 22762 third-party-advisory
- 24288 third-party-advisory
- 23474 third-party-advisory
- 23064 third-party-advisory
- DSA-1233 vendor-advisory
- 23370 third-party-advisory
- http://support.avaya.com/elmodocs2/security/ASA-2006-249.htm
- ADV-2006-3999 vdb-entry
- http://support.avaya.com/elmodocs2/security/ASA-2007-078.htm
- 20070615 rPSA-2007-0124-1 kernel xen mailing-list
- http://support.avaya.com/elmodocs2/security/ASA-2006-254.htm
- oval:org.mitre.oval:def:10388 vdb-entry signature
- 22497 third-party-advisory
- 22945 third-party-advisory
- RHSA-2006:0710 vendor-advisory
- USN-395-1 vendor-advisory
- ADV-2006-3937 vdb-entry
- MDKSA-2006:197 vendor-advisory
- 23395 third-party-advisory
- 25691 third-party-advisory
- kernel-clipmkip-dos(29387) vdb-entry