PT-2025-38554 · Linux+4 · Linux Kernel+4

Published 2025-09-03 · Updated 2026-05-07 · CVE-2025-39847

Positive Technologies (AI Summary)

CVSS v3.1

5.5

Medium

Base vector

AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

Name of the Vulnerable Software and Affected Versions Linux kernel (affected versions not specified)

Description A memory leak exists in the pad compress skb function within the PPP (Point-to-Point Protocol) component of the Linux kernel. If the alloc skb function fails during the compression process, the function returns NULL without releasing the original socket buffer (skb), leading to a memory leak. The issue occurs because the reference to the original skb is lost when pad compress skb() fails, and the subsequent kfree skb(skb) call has no effect.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Exploit

Memory Leak

Weakness Enumeration

CWE-401

Related Identifiers

AZL-67553

AZL-74841

BDU:2025-13880

CVE-2025-39847

DLA-4327-1

DLA-4328-1

DSA-6008-1

DSA-6009-1

ECHO-D1A6-4977-612D

INFESA-2025_0006

OESA-2025-2633

OESA-2025-2634

OESA-2025-2635

OPENSUSE-SU-2025:20081-1

SUSE-SU-2025:03600-1

SUSE-SU-2025:03614-1

SUSE-SU-2025:03634-1

SUSE-SU-2025:20851-1

SUSE-SU-2025:20861-1

SUSE-SU-2025:20870-1

SUSE-SU-2025:20898-1

SUSE-SU-2025:21074-1

SUSE-SU-2025:21139-1

SUSE-SU-2025:21179-1

SUSE-SU-2025:3751-1

SUSE-SU-2025:4057-1

SUSE-SU-2025:4132-1

SUSE-SU-2025:4141-1

USN-7909-1

USN-7909-2

USN-7909-3

USN-7909-4

USN-7909-5

USN-7910-1

USN-7910-2

USN-7933-1

USN-7938-1

USN-8095-1

USN-8095-2

USN-8095-3

USN-8095-4

USN-8095-5

USN-8100-1

USN-8125-1

USN-8126-1

USN-8165-1

USN-8261-1

Affected Products

Debian

Linuxmint

Linux Kernel

Suse

Ubuntu

References · 3809

• 🔥 https://github.com/CVEProject/cvelistV5/tree/main/cves/2025/39xxx/CVE-2025-39847.json · Exploit
• https://ubuntu.com/security/CVE-2025-38055 · Vendor Advisory
• https://ubuntu.com/security/CVE-2025-40092 · Vendor Advisory
• https://ubuntu.com/security/CVE-2025-38251 · Vendor Advisory
• https://ubuntu.com/security/CVE-2025-38543 · Vendor Advisory
• https://ubuntu.com/security/CVE-2025-40284 · Vendor Advisory
• https://ubuntu.com/security/CVE-2025-71078 · Vendor Advisory
• https://ubuntu.com/security/CVE-2025-39977 · Vendor Advisory
• https://ubuntu.com/security/CVE-2025-40129 · Vendor Advisory
• https://ubuntu.com/security/CVE-2025-39965 · Vendor Advisory
• https://ubuntu.com/security/CVE-2025-38701 · Vendor Advisory
• https://ubuntu.com/security/CVE-2025-38184 · Vendor Advisory
• https://ubuntu.com/security/CVE-2025-71079 · Vendor Advisory
• https://ubuntu.com/security/CVE-2025-37959 · Vendor Advisory
• https://osv.dev/vulnerability/SUSE-SU-2025:21139-1 · Vendor Advisory