CVE-2025-39847
MEDIUM EPSS 4.5%
Published Sep 19, 20259mo ago · Modified Jun 17, 20262w ago
5.5 CVSS 3.1
Published Sep 19, 2025 9mo ago
Last Modified Jun 17, 2026 2w ago
Description
In the Linux kernel, the following vulnerability has been resolved: ppp: fix memory leak in pad_compress_skb If alloc_skb() fails in pad_compress_skb(), it returns NULL without releasing the old skb. The caller does: skb = pad_compress_skb(ppp, skb); if (!skb) goto drop; drop: kfree_skb(skb); When pad_compress_skb() returns NULL, the reference to the old skb is lost and kfree_skb(skb) ends up doing nothing, leading to a memory leak. Align pad_compress_skb() semantics with realloc(): only free the old skb if allocation and compression succeed. At the call site, use the new_skb variable so the original skb is not lost when pad_compress_skb() fails.
CVSS Details
Base Score
Exploitability
Impact
Vector string
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H Attack Vector Local
Attack Complexity Low
Privileges Required Low
User Interaction None
Scope Unchanged
Confidentiality None
Integrity None
Availability High
Threat Intelligence
EPSS Exploit Probability
4.5% percentile
Exploit & Patch Status
No Known Exploit
Patch Available
Weaknesses 1
CWE-401
Affected Products 12
| Vendor | Product | Version | Range |
|---|---|---|---|
| linux | linux_kernel | * | ≥2.6.15 – <5.4.299 |
| linux | linux_kernel | * | ≥5.5 – <5.10.243 |
| linux | linux_kernel | * | ≥5.11 – <5.15.192 |
| linux | linux_kernel | * | ≥5.16 – <6.1.151 |
| linux | linux_kernel | * | ≥6.2 – <6.6.105 |
| linux | linux_kernel | * | ≥6.7 – <6.12.46 |
| linux | linux_kernel | * | ≥6.13 – <6.16.6 |
| linux | linux_kernel | 6.17 | any |
| linux | linux_kernel | 6.17 | any |
| linux | linux_kernel | 6.17 | any |
| linux | linux_kernel | 6.17 | any |
| debian | debian_linux | 11.0 | any |
References 11
- cert-portal.siemens.com https://cert-portal.siemens.com/productcert/html/ssa-032379.html
- git.kernel.org https://git.kernel.org/stable/c/0b21e9cd4559102da798bdcba453b64ecd7be7ee
- git.kernel.org https://git.kernel.org/stable/c/1d8b354eafb8876d8bdb1bef69c7d2438aacfbe8
- git.kernel.org https://git.kernel.org/stable/c/33a5bac5f14772730d2caf632ae97b6c2ee95044
- git.kernel.org https://git.kernel.org/stable/c/4844123fe0b853a4982c02666cb3fd863d701d50
- git.kernel.org https://git.kernel.org/stable/c/631fc8ab5beb9e0ec8651fb9875b9a968e7b4ae4
- git.kernel.org https://git.kernel.org/stable/c/85c1c86a67e09143aa464e9bf09c397816772348
- git.kernel.org https://git.kernel.org/stable/c/87a35a36742df328d0badf4fbc2e56061c15846c
- git.kernel.org https://git.kernel.org/stable/c/9ca6a040f76c0b149293e430dabab446f3fc8ab7
- lists.debian.org https://lists.debian.org/debian-lts-announce/2025/10/msg00007.html
- lists.debian.org https://lists.debian.org/debian-lts-announce/2025/10/msg00008.html
Remediation
- git.kernel.org https://git.kernel.org/stable/c/0b21e9cd4559102da798bdcba453b64ecd7be7ee
- git.kernel.org https://git.kernel.org/stable/c/1d8b354eafb8876d8bdb1bef69c7d2438aacfbe8
- git.kernel.org https://git.kernel.org/stable/c/33a5bac5f14772730d2caf632ae97b6c2ee95044
- git.kernel.org https://git.kernel.org/stable/c/4844123fe0b853a4982c02666cb3fd863d701d50
- git.kernel.org https://git.kernel.org/stable/c/631fc8ab5beb9e0ec8651fb9875b9a968e7b4ae4
- git.kernel.org https://git.kernel.org/stable/c/85c1c86a67e09143aa464e9bf09c397816772348
- git.kernel.org https://git.kernel.org/stable/c/87a35a36742df328d0badf4fbc2e56061c15846c
- git.kernel.org https://git.kernel.org/stable/c/9ca6a040f76c0b149293e430dabab446f3fc8ab7