{
  "schemaVersion": 1,
  "attribution": [
    {
      "source": "CISA Known Exploited Vulnerabilities",
      "url": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog",
      "licence": "US government work"
    },
    {
      "source": "GitHub Advisory Database",
      "url": "https://github.com/advisories",
      "licence": "CC BY 4.0"
    },
    {
      "source": "Have I Been Pwned",
      "url": "https://haveibeenpwned.com/",
      "licence": "CC BY 4.0"
    },
    {
      "source": "CVE Program (CVE records)",
      "url": "https://www.cve.org/Legal/TermsOfUse",
      "licence": "CVE Terms of Use",
      "notice": "Copyright © 1999-2026, The MITRE Corporation. CVE is a trademark and the CVE logo is a registered trademark of The MITRE Corporation.",
      "terms": "CVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE™). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy."
    },
    {
      "source": "FIRST EPSS",
      "url": "https://www.first.org/epss/",
      "licence": "free to use; FIRST requests attribution"
    }
  ],
  "record": {
    "id": "CVE-2025-39847",
    "sourceURL": "https://www.cve.org/CVERecord?id=CVE-2025-39847",
    "idYear": 2025,
    "status": "PUBLISHED",
    "publishedAt": "2025-09-19T15:26:20.648Z",
    "updatedAt": "2026-05-12T12:07:35.941Z",
    "importedAt": "2026-10-24T01:57:34.152Z",
    "snapshot": {
      "id": "cve_2026-10-24_midnight_baseline",
      "at": "2026-10-24T00:00:00.000Z",
      "source": "https://github.com/CVEProject/cvelistV5/releases/tag/cve_2026-10-24_0100Z"
    },
    "facts": {
      "title": "ppp: fix memory leak in pad_compress_skb",
      "summary": "In the Linux kernel, the following vulnerability has been resolved:\n\nppp: fix memory leak in pad_compress_skb\n\nIf alloc_skb() fails in pad_compress_skb(), it returns NULL without\nreleasing the old skb. The caller does:\n\n    skb = pad_compress_skb(ppp, skb);\n    if (!skb)\n        goto drop;\n\ndrop:\n    kfree_skb(skb);\n\nWhen pad_compress_skb() returns NULL, the reference to the old skb is\nlost and kfree_skb(skb) ends up doing nothing, leading to a memory leak.\n\nAlign pad_compress_skb() semantics with realloc(): only free the old\nskb if allocation and compression succeed.  At the call site, use the\nnew_skb variable so the original skb is not lost when pad_compress_skb()\nfails.",
      "affected": [
        {
          "vendor": "Linux",
          "product": "Linux",
          "defaultStatus": "unaffected",
          "versions": [
            {
              "version": "b3f9b92a6ec1a9a5e4b4b36e484f2f62cc73277c",
              "status": "affected",
              "versionType": "git",
              "lessThan": "9ca6a040f76c0b149293e430dabab446f3fc8ab7"
            },
            {
              "version": "b3f9b92a6ec1a9a5e4b4b36e484f2f62cc73277c",
              "status": "affected",
              "versionType": "git",
              "lessThan": "87a35a36742df328d0badf4fbc2e56061c15846c"
            },
            {
              "version": "b3f9b92a6ec1a9a5e4b4b36e484f2f62cc73277c",
              "status": "affected",
              "versionType": "git",
              "lessThan": "0b21e9cd4559102da798bdcba453b64ecd7be7ee"
            },
            {
              "version": "b3f9b92a6ec1a9a5e4b4b36e484f2f62cc73277c",
              "status": "affected",
              "versionType": "git",
              "lessThan": "1d8b354eafb8876d8bdb1bef69c7d2438aacfbe8"
            },
            {
              "version": "b3f9b92a6ec1a9a5e4b4b36e484f2f62cc73277c",
              "status": "affected",
              "versionType": "git",
              "lessThan": "85c1c86a67e09143aa464e9bf09c397816772348"
            },
            {
              "version": "b3f9b92a6ec1a9a5e4b4b36e484f2f62cc73277c",
              "status": "affected",
              "versionType": "git",
              "lessThan": "631fc8ab5beb9e0ec8651fb9875b9a968e7b4ae4"
            },
            {
              "version": "b3f9b92a6ec1a9a5e4b4b36e484f2f62cc73277c",
              "status": "affected",
              "versionType": "git",
              "lessThan": "33a5bac5f14772730d2caf632ae97b6c2ee95044"
            },
            {
              "version": "b3f9b92a6ec1a9a5e4b4b36e484f2f62cc73277c",
              "status": "affected",
              "versionType": "git",
              "lessThan": "4844123fe0b853a4982c02666cb3fd863d701d50"
            }
          ]
        },
        {
          "vendor": "Linux",
          "product": "Linux",
          "defaultStatus": "affected",
          "versions": [
            {
              "version": "2.6.15",
              "status": "affected"
            },
            {
              "version": "0",
              "status": "unaffected",
              "versionType": "semver",
              "lessThan": "2.6.15"
            },
            {
              "version": "5.4.299",
              "status": "unaffected",
              "versionType": "semver",
              "lessThanOrEqual": "5.4.*"
            },
            {
              "version": "5.10.243",
              "status": "unaffected",
              "versionType": "semver",
              "lessThanOrEqual": "5.10.*"
            },
            {
              "version": "5.15.192",
              "status": "unaffected",
              "versionType": "semver",
              "lessThanOrEqual": "5.15.*"
            },
            {
              "version": "6.1.151",
              "status": "unaffected",
              "versionType": "semver",
              "lessThanOrEqual": "6.1.*"
            },
            {
              "version": "6.6.105",
              "status": "unaffected",
              "versionType": "semver",
              "lessThanOrEqual": "6.6.*"
            },
            {
              "version": "6.12.46",
              "status": "unaffected",
              "versionType": "semver",
              "lessThanOrEqual": "6.12.*"
            },
            {
              "version": "6.16.6",
              "status": "unaffected",
              "versionType": "semver",
              "lessThanOrEqual": "6.16.*"
            },
            {
              "version": "6.17",
              "status": "unaffected",
              "versionType": "original_commit_for_fix",
              "lessThanOrEqual": "*"
            }
          ]
        }
      ]
    }
  }
}