Wind River Support Network

HomeDefectsLIN1022-17987
Acknowledged

LIN1022-17987 : Security Advisory - linux - CVE-2025-39847

Created: Sep 21, 2025    Updated: Sep 23, 2025
Found In Version: 10.22.33.1
Severity: Standard
Applicable for: Wind River Linux LTS 22
Component/s: Kernel

Description

In the Linux kernel, the following vulnerability has been resolved:[EOL][EOL]ppp: fix memory leak in pad_compress_skb[EOL][EOL]If alloc_skb() fails in pad_compress_skb(), it returns NULL without[EOL]releasing the old skb. The caller does:[EOL][EOL]    skb = pad_compress_skb(ppp, skb);[EOL]    if (!skb)[EOL]        goto drop;[EOL][EOL]drop:[EOL]    kfree_skb(skb);[EOL][EOL]When pad_compress_skb() returns NULL, the reference to the old skb is[EOL]lost and kfree_skb(skb) ends up doing nothing, leading to a memory leak.[EOL][EOL]Align pad_compress_skb() semantics with realloc(): only free the old[EOL]skb if allocation and compression succeed.  At the call site, use the[EOL]new_skb variable so the original skb is not lost when pad_compress_skb()[EOL]fails.
Live chat
Online