In the Linux kernel, the following vulnerability has been resolved:
ppp: fix memory leak in padcompressskb
If allocskb() fails in padcompress_skb(), it returns NULL without releasing the old skb. The caller does:
skb = pad_compress_skb(ppp, skb);
if (!skb)
    goto drop;
drop: kfree_skb(skb);
When padcompressskb() returns NULL, the reference to the old skb is lost and kfree_skb(skb) ends up doing nothing, leading to a memory leak.
Align padcompressskb() semantics with realloc(): only free the old skb if allocation and compression succeed. At the call site, use the newskb variable so the original skb is not lost when padcompress_skb() fails.
[
    {
        "deprecated": false,
        "target": {
            "function": "ppp_send_frame",
            "file": "drivers/net/ppp/ppp_generic.c"
        },
        "signature_type": "Function",
        "source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@9ca6a040f76c0b149293e430dabab446f3fc8ab7",
        "digest": {
            "function_hash": "92381091404528526474508200540115664310",
            "length": 2433.0
        },
        "id": "CVE-2025-39847-000c781c",
        "signature_version": "v1"
    },
    {
        "deprecated": false,
        "target": {
            "function": "ppp_send_frame",
            "file": "drivers/net/ppp/ppp_generic.c"
        },
        "signature_type": "Function",
        "source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@87a35a36742df328d0badf4fbc2e56061c15846c",
        "digest": {
            "function_hash": "92381091404528526474508200540115664310",
            "length": 2433.0
        },
        "id": "CVE-2025-39847-067c0504",
        "signature_version": "v1"
    },
    {
        "deprecated": false,
        "target": {
            "function": "pad_compress_skb",
            "file": "drivers/net/ppp/ppp_generic.c"
        },
        "signature_type": "Function",
        "source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@9ca6a040f76c0b149293e430dabab446f3fc8ab7",
        "digest": {
            "function_hash": "331988424219287095171138322693817832501",
            "length": 1009.0
        },
        "id": "CVE-2025-39847-09f32b16",
        "signature_version": "v1"
    },
    {
        "deprecated": false,
        "target": {
            "function": "pad_compress_skb",
            "file": "drivers/net/ppp/ppp_generic.c"
        },
        "signature_type": "Function",
        "source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@85c1c86a67e09143aa464e9bf09c397816772348",
        "digest": {
            "function_hash": "331988424219287095171138322693817832501",
            "length": 1009.0
        },
        "id": "CVE-2025-39847-0bd4a7d1",
        "signature_version": "v1"
    },
    {
        "deprecated": false,
        "target": {
            "file": "drivers/net/ppp/ppp_generic.c"
        },
        "signature_type": "Line",
        "source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@33a5bac5f14772730d2caf632ae97b6c2ee95044",
        "digest": {
            "threshold": 0.9,
            "line_hashes": [
                "276636255120100706561140157212978319432",
                "55829420223695408849192385140628696563",
                "168932883713912060084761680093108038223",
                "8308544490015562216543838113310104136",
                "109277469889237095925664481820540532921",
                "183979913570224277252247881574250061579",
                "219958819775903306392194923039033473121",
                "183530889483296138570307612122907848057",
                "3859885813748848713060688504156912300",
                "149942529086438987781671592107618920575"
            ]
        },
        "id": "CVE-2025-39847-1906de41",
        "signature_version": "v1"
    },
    {
        "deprecated": false,
        "target": {
            "file": "drivers/net/ppp/ppp_generic.c"
        },
        "signature_type": "Line",
        "source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@85c1c86a67e09143aa464e9bf09c397816772348",
        "digest": {
            "threshold": 0.9,
            "line_hashes": [
                "276636255120100706561140157212978319432",
                "55829420223695408849192385140628696563",
                "168932883713912060084761680093108038223",
                "8308544490015562216543838113310104136",
                "109277469889237095925664481820540532921",
                "183979913570224277252247881574250061579",
                "219958819775903306392194923039033473121",
                "183530889483296138570307612122907848057",
                "3859885813748848713060688504156912300",
                "149942529086438987781671592107618920575"
            ]
        },
        "id": "CVE-2025-39847-218071f6",
        "signature_version": "v1"
    },
    {
        "deprecated": false,
        "target": {
            "file": "drivers/net/ppp/ppp_generic.c"
        },
        "signature_type": "Line",
        "source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@4844123fe0b853a4982c02666cb3fd863d701d50",
        "digest": {
            "threshold": 0.9,
            "line_hashes": [
                "276636255120100706561140157212978319432",
                "55829420223695408849192385140628696563",
                "168932883713912060084761680093108038223",
                "8308544490015562216543838113310104136",
                "109277469889237095925664481820540532921",
                "183979913570224277252247881574250061579",
                "219958819775903306392194923039033473121",
                "183530889483296138570307612122907848057",
                "3859885813748848713060688504156912300",
                "149942529086438987781671592107618920575"
            ]
        },
        "id": "CVE-2025-39847-2de1cab0",
        "signature_version": "v1"
    },
    {
        "deprecated": false,
        "target": {
            "function": "ppp_send_frame",
            "file": "drivers/net/ppp/ppp_generic.c"
        },
        "signature_type": "Function",
        "source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@85c1c86a67e09143aa464e9bf09c397816772348",
        "digest": {
            "function_hash": "92381091404528526474508200540115664310",
            "length": 2433.0
        },
        "id": "CVE-2025-39847-5c413dbc",
        "signature_version": "v1"
    },
    {
        "deprecated": false,
        "target": {
            "function": "pad_compress_skb",
            "file": "drivers/net/ppp/ppp_generic.c"
        },
        "signature_type": "Function",
        "source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@1d8b354eafb8876d8bdb1bef69c7d2438aacfbe8",
        "digest": {
            "function_hash": "331988424219287095171138322693817832501",
            "length": 1009.0
        },
        "id": "CVE-2025-39847-5c465dc5",
        "signature_version": "v1"
    },
    {
        "deprecated": false,
        "target": {
            "function": "pad_compress_skb",
            "file": "drivers/net/ppp/ppp_generic.c"
        },
        "signature_type": "Function",
        "source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@4844123fe0b853a4982c02666cb3fd863d701d50",
        "digest": {
            "function_hash": "331988424219287095171138322693817832501",
            "length": 1009.0
        },
        "id": "CVE-2025-39847-5ee7068f",
        "signature_version": "v1"
    },
    {
        "deprecated": false,
        "target": {
            "function": "pad_compress_skb",
            "file": "drivers/net/ppp/ppp_generic.c"
        },
        "signature_type": "Function",
        "source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@0b21e9cd4559102da798bdcba453b64ecd7be7ee",
        "digest": {
            "function_hash": "331988424219287095171138322693817832501",
            "length": 1009.0
        },
        "id": "CVE-2025-39847-6355728c",
        "signature_version": "v1"
    },
    {
        "deprecated": false,
        "target": {
            "file": "drivers/net/ppp/ppp_generic.c"
        },
        "signature_type": "Line",
        "source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@0b21e9cd4559102da798bdcba453b64ecd7be7ee",
        "digest": {
            "threshold": 0.9,
            "line_hashes": [
                "276636255120100706561140157212978319432",
                "55829420223695408849192385140628696563",
                "168932883713912060084761680093108038223",
                "8308544490015562216543838113310104136",
                "109277469889237095925664481820540532921",
                "183979913570224277252247881574250061579",
                "219958819775903306392194923039033473121",
                "183530889483296138570307612122907848057",
                "3859885813748848713060688504156912300",
                "149942529086438987781671592107618920575"
            ]
        },
        "id": "CVE-2025-39847-70f0b5fc",
        "signature_version": "v1"
    },
    {
        "deprecated": false,
        "target": {
            "file": "drivers/net/ppp/ppp_generic.c"
        },
        "signature_type": "Line",
        "source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@87a35a36742df328d0badf4fbc2e56061c15846c",
        "digest": {
            "threshold": 0.9,
            "line_hashes": [
                "276636255120100706561140157212978319432",
                "55829420223695408849192385140628696563",
                "168932883713912060084761680093108038223",
                "8308544490015562216543838113310104136",
                "109277469889237095925664481820540532921",
                "183979913570224277252247881574250061579",
                "219958819775903306392194923039033473121",
                "183530889483296138570307612122907848057",
                "3859885813748848713060688504156912300",
                "149942529086438987781671592107618920575"
            ]
        },
        "id": "CVE-2025-39847-78d19e08",
        "signature_version": "v1"
    },
    {
        "deprecated": false,
        "target": {
            "file": "drivers/net/ppp/ppp_generic.c"
        },
        "signature_type": "Line",
        "source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@631fc8ab5beb9e0ec8651fb9875b9a968e7b4ae4",
        "digest": {
            "threshold": 0.9,
            "line_hashes": [
                "276636255120100706561140157212978319432",
                "55829420223695408849192385140628696563",
                "168932883713912060084761680093108038223",
                "8308544490015562216543838113310104136",
                "109277469889237095925664481820540532921",
                "183979913570224277252247881574250061579",
                "219958819775903306392194923039033473121",
                "183530889483296138570307612122907848057",
                "3859885813748848713060688504156912300",
                "149942529086438987781671592107618920575"
            ]
        },
        "id": "CVE-2025-39847-840d01ca",
        "signature_version": "v1"
    },
    {
        "deprecated": false,
        "target": {
            "function": "ppp_send_frame",
            "file": "drivers/net/ppp/ppp_generic.c"
        },
        "signature_type": "Function",
        "source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@631fc8ab5beb9e0ec8651fb9875b9a968e7b4ae4",
        "digest": {
            "function_hash": "92381091404528526474508200540115664310",
            "length": 2433.0
        },
        "id": "CVE-2025-39847-9e713d2a",
        "signature_version": "v1"
    },
    {
        "deprecated": false,
        "target": {
            "function": "pad_compress_skb",
            "file": "drivers/net/ppp/ppp_generic.c"
        },
        "signature_type": "Function",
        "source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@33a5bac5f14772730d2caf632ae97b6c2ee95044",
        "digest": {
            "function_hash": "331988424219287095171138322693817832501",
            "length": 1009.0
        },
        "id": "CVE-2025-39847-a0197847",
        "signature_version": "v1"
    },
    {
        "deprecated": false,
        "target": {
            "function": "ppp_send_frame",
            "file": "drivers/net/ppp/ppp_generic.c"
        },
        "signature_type": "Function",
        "source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@4844123fe0b853a4982c02666cb3fd863d701d50",
        "digest": {
            "function_hash": "317115270519907963077121105528875668158",
            "length": 2399.0
        },
        "id": "CVE-2025-39847-b7cd232e",
        "signature_version": "v1"
    },
    {
        "deprecated": false,
        "target": {
            "file": "drivers/net/ppp/ppp_generic.c"
        },
        "signature_type": "Line",
        "source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@9ca6a040f76c0b149293e430dabab446f3fc8ab7",
        "digest": {
            "threshold": 0.9,
            "line_hashes": [
                "276636255120100706561140157212978319432",
                "55829420223695408849192385140628696563",
                "168932883713912060084761680093108038223",
                "8308544490015562216543838113310104136",
                "109277469889237095925664481820540532921",
                "183979913570224277252247881574250061579",
                "219958819775903306392194923039033473121",
                "183530889483296138570307612122907848057",
                "3859885813748848713060688504156912300",
                "149942529086438987781671592107618920575"
            ]
        },
        "id": "CVE-2025-39847-b8a023c7",
        "signature_version": "v1"
    },
    {
        "deprecated": false,
        "target": {
            "function": "ppp_send_frame",
            "file": "drivers/net/ppp/ppp_generic.c"
        },
        "signature_type": "Function",
        "source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@1d8b354eafb8876d8bdb1bef69c7d2438aacfbe8",
        "digest": {
            "function_hash": "92381091404528526474508200540115664310",
            "length": 2433.0
        },
        "id": "CVE-2025-39847-c60a16af",
        "signature_version": "v1"
    },
    {
        "deprecated": false,
        "target": {
            "function": "ppp_send_frame",
            "file": "drivers/net/ppp/ppp_generic.c"
        },
        "signature_type": "Function",
        "source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@0b21e9cd4559102da798bdcba453b64ecd7be7ee",
        "digest": {
            "function_hash": "92381091404528526474508200540115664310",
            "length": 2433.0
        },
        "id": "CVE-2025-39847-cb027d0d",
        "signature_version": "v1"
    },
    {
        "deprecated": false,
        "target": {
            "function": "pad_compress_skb",
            "file": "drivers/net/ppp/ppp_generic.c"
        },
        "signature_type": "Function",
        "source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@631fc8ab5beb9e0ec8651fb9875b9a968e7b4ae4",
        "digest": {
            "function_hash": "331988424219287095171138322693817832501",
            "length": 1009.0
        },
        "id": "CVE-2025-39847-d2ecdf2e",
        "signature_version": "v1"
    },
    {
        "deprecated": false,
        "target": {
            "function": "ppp_send_frame",
            "file": "drivers/net/ppp/ppp_generic.c"
        },
        "signature_type": "Function",
        "source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@33a5bac5f14772730d2caf632ae97b6c2ee95044",
        "digest": {
            "function_hash": "92381091404528526474508200540115664310",
            "length": 2433.0
        },
        "id": "CVE-2025-39847-dde9ff07",
        "signature_version": "v1"
    },
    {
        "deprecated": false,
        "target": {
            "function": "pad_compress_skb",
            "file": "drivers/net/ppp/ppp_generic.c"
        },
        "signature_type": "Function",
        "source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@87a35a36742df328d0badf4fbc2e56061c15846c",
        "digest": {
            "function_hash": "331988424219287095171138322693817832501",
            "length": 1009.0
        },
        "id": "CVE-2025-39847-de5742dd",
        "signature_version": "v1"
    },
    {
        "deprecated": false,
        "target": {
            "file": "drivers/net/ppp/ppp_generic.c"
        },
        "signature_type": "Line",
        "source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@1d8b354eafb8876d8bdb1bef69c7d2438aacfbe8",
        "digest": {
            "threshold": 0.9,
            "line_hashes": [
                "276636255120100706561140157212978319432",
                "55829420223695408849192385140628696563",
                "168932883713912060084761680093108038223",
                "8308544490015562216543838113310104136",
                "109277469889237095925664481820540532921",
                "183979913570224277252247881574250061579",
                "219958819775903306392194923039033473121",
                "183530889483296138570307612122907848057",
                "3859885813748848713060688504156912300",
                "149942529086438987781671592107618920575"
            ]
        },
        "id": "CVE-2025-39847-ed66fecc",
        "signature_version": "v1"
    }
]