Astra Linux – Vulnerability found in Linux 6.1, Linux 6.12

In the Linux kernel, the following vulnerability has been resolved: ppp: A memory leak has been fixed in padcompressskb. If allocskb fails in padcompressskb, it returns NULL without releasing the old skb. The caller does the following: c skb = padcompressskbppp, skb; if !skb goto drop; drop:...

CVE-2025-39847 ppp: fix memory leak in pad_compress_skb

In the Linux kernel, the following vulnerability has been resolved: ppp: fix memory leak in padcompressskb If allocskb fails in padcompressskb, it returns NULL without releasing the old skb. The caller does: skb = padcompressskbppp, skb; if !skb goto drop; drop: kfreeskbskb; When padcompressskb...

CVE-2025-39847

CVE-2025-39847: In the Linux kernel, pad_compress_skb() can leak memory if alloc_skb() fails, as the old skb reference may be freed incorrectly at the caller. The fix aligns pad_compress_skb() semantics with realloc: free the old skb only after successful allocation and compression, and at the ca...