CVE-2025-39965

In the Linux kernel, the following vulnerability has been resolved:<br /> <br /> xfrm: xfrm_alloc_spi shouldn&amp;#39;t use 0 as SPI<br /> <br /> x-&gt;id.spi == 0 means "no SPI assigned", but since commit<br /> 94f39804d891 ("xfrm: Duplicate SPI Handling"), we now create states<br /> and add them to the byspi list with this value.<br /> <br /> __xfrm_state_delete doesn&amp;#39;t remove those states from the byspi list,<br /> since they shouldn&amp;#39;t be there, and this shows up as a UAF the next<br /> time we go through the byspi list.