THREATOPS
THREAT OPS › Threat News › [NVD] CVE-2025-38097 (HIGH 7.8) — In the Linux kernel, the following vulnerability has been resolved: espintcp: remove encap socket caching to avoid reference leak The current scheme for caching the encap socket can lead to reference leaks when we try to delete the netns. The reference chain is: xfrm_state ->

[NVD] CVE-2025-38097 (HIGH 7.8) — In the Linux kernel, the following vulnerability has been resolved: espintcp: remove encap socket caching to avoid reference leak The current scheme for caching the encap socket can lead to reference leaks when we try to delete the netns. The reference chain is: xfrm_state ->

lownvdPublished 2025-07-03

CVE-2025-38097 CVSS: 7.8 HIGH Published: 2025-07-03T09:15:23.030

In the Linux kernel, the following vulnerability has been resolved:

espintcp: remove encap socket caching to avoid reference leak

The current scheme for caching the encap socket can lead to reference leaks when we try to delete the netns.

The reference chain is: xfrm_state -> enacp_sk -> netns

Since the encap socket is a userspa

Indicators of compromise

Original source: https://nvd.nist.gov/vuln/detail/CVE-2025-38097