Memory Leak Vulnerability in Linux Kernel's PPP Module

CVE-2025-39847

What is CVE-2025-39847?

The Linux kernel's Point-to-Point Protocol (PPP) module has a vulnerability leading to memory leaks. When the function pad_compress_skb() fails due to allocation issues, it fails to release the previous socket buffer (skb), resulting in lost references and memory retention. This can adversely affect system memory management, leading to performance degradation. The vulnerability has been addressed by ensuring that memory is only freed when the new allocation and compression processes are successful, thereby preventing memory leaks and maintaining kernel stability.

References