PT-2025-27684 · Linux+6 · Linux Kernel+6
Published
2025-04-09
·
Updated
2026-05-26
·
CVE-2025-38097
CVSS v3.1
5.5
Medium
| Vector | AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H |
Name of the Vulnerable Software and Affected Versions:
Linux kernel (affected versions not specified)
Description:
A reference leak issue has been identified in the Linux kernel, specifically in the espintcp component. The current caching scheme for the encap socket can lead to reference leaks when attempting to delete the netns. This occurs due to the reference chain: xfrm state -> enacp sk -> netns. The issue arises when the espintcp state is deleted before removing the netns, causing the reference on the socket to be dropped, and potentially preventing the netns from being deleted. The patch to resolve this issue results in a small performance regression of approximately 2%.
Recommendations:
At the moment, there is no information about a newer version that contains a fix for this vulnerability.
Exploit
Memory Leak
Found an issue in the description? Have something to add? Feel free to write us 👾
Weakness Enumeration
Related Identifiers
Affected Products
Astra Linux
Debian
Linuxmint
Linux Kernel
Red Os
Suse
Ubuntu