PT-2025-37331 · Linux+4 · Linux Kernel+4
Published
2025-01-01
·
Updated
2026-04-20
·
CVE-2025-39797
CVSS v3.1
7.8
High
| Vector | AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H |
Name of the Vulnerable Software and Affected Versions:
Linux kernel (affected versions not specified)
Description:
The Linux kernel contains a flaw related to the handling of Security Parameter Index (SPI) values within the XFRM framework. Specifically, the
xfrm alloc spi() function may return success even when a requested SPI is already in use, leading to duplicate SPI assignments for inbound Security Associations (SAs). This occurs when SAs are differentiated only by their destination addresses. This inconsistency during SPI lookups can cause packet processing failures and packet drops, violating RFC 4301 section 4.4.2, which states that a unicast SA is uniquely identified by the SPI and protocol for inbound processing. The issue is consistently reproducible with a restricted SPI range. The xfrm spi hash() lookup function computes a hash using the destination address, protocol, and family, potentially leading to incorrect lookups when duplicate SPIs exist with different destination addresses.Recommendations:
At the moment, there is no information about a newer version that contains a fix for this vulnerability.
Exploit
Found an issue in the description? Have something to add? Feel free to write us 👾
Weakness Enumeration
Related Identifiers
Affected Products
Debian
Linuxmint
Linux Kernel
Suse
Ubuntu