VulnSocial

CVE-2025-39847Disclosure(debian / debian_linux)

LOWCVSS 5.5 · MEDIUM

Signal is active with 1 mentions in latest observed window

Immediate actions

  • Track advisory updates for patch or workaround availability

Recommended action window: Monitor and triage in normal cycle

NVD description

In the Linux kernel, the following vulnerability has been resolved: ppp: fix memory leak in pad_compress_skb If alloc_skb() fails in pad_compress_skb(), it returns NULL without releasing the old skb. The caller does: skb = pad_compress_skb(ppp, skb); if (!skb) goto drop; drop: kfree_skb(skb); When pad_compress_skb() returns NULL, the reference to the old skb is lost and kfree_skb(skb) ends up doing nothing, leading to a memory leak. Align pad_compress_skb() semantics with realloc(): only free the old skb if allocation and compression succeed. At the call site, use the new_skb variable so the original skb is not lost when pad_compress_skb() fails.

debian CVEsBack to dashboard
0.5/ 10 priority

Sources & remediation

Patch / fix
Vendor / third-party advisories
Other references
Weakness type (CWE)
CWE-401

Priority

LOW

Exploitation

NONE

PoC

NONE

Patch

AVAILABLE

Momentum

NONE

Are you affected?

If you run products in this scope, you should treat this CVE as relevant to your environment.

  • debian_linux
  • linux_kernel

Threat summary

  • 1 mentions across 1 observed day

What's happening

  • Technical details provided in 1 signal
  • Disclosure: 1 classified signal
  • 1 total mentions across 1 day

Affected systems

Vendors
debianlinux
Products
debian_linuxlinux_kernel

2 versions affected across 2 products

Deep dive

Activity timeline1 mentions / 1d
00111Mentions · 2026-07-16: 1Technical Details · 2026-07-16: 107-16
Signal classification1 categories
Disclosure
1100.0%
Referenced assets1 URL
Full discourse1 post
  • BREACHSPIDER@breachspider
    Disclosure

    [CVE Analysis] CVE-2025-39847: Multiple Memory Corruption Flaws in Siemens SIMATIC CN 4100 Threaten Communication Node Availability https://breachspider.com/intel/2026-07-16-cve-2025-39847-multiple-memory-corruption-flaws-in-siemens-s #ICS #OTSecurity #SCADA #CriticalInfrastructure

    Post summary

    Analysis of CVE‑2025‑39847 describes multiple memory corruption bugs in Siemens SIMATIC CN 4100 that could affect availability; no PoC, exploit, or active usage details are disclosed.

    0001047
    2.3K followersView on X
CPE platform detail6 entries

6 of 6 entries

PartVendorProductVersionTarget SWTarget HW
OSdebiandebian_linux11.0--
OSlinuxlinux_kernel---
OSlinuxlinux_kernel6.17--
OSlinuxlinux_kernel6.17--
OSlinuxlinux_kernel6.17--
OSlinuxlinux_kernel6.17--

Explore more

Back to dashboarddebian CVEslinux CVEsdebian_linux vulnerabilities