CVE-2025-39965
Gravedad:
Pendiente de análisis
Tipo:
No Disponible / Otro tipo
Fecha de publicación:
13/10/2025
Última modificación:
14/10/2025
Descripción
*** Pendiente de traducción *** In the Linux kernel, the following vulnerability has been resolved:<br />
<br />
xfrm: xfrm_alloc_spi shouldn&#39;t use 0 as SPI<br />
<br />
x->id.spi == 0 means "no SPI assigned", but since commit<br />
94f39804d891 ("xfrm: Duplicate SPI Handling"), we now create states<br />
and add them to the byspi list with this value.<br />
<br />
__xfrm_state_delete doesn&#39;t remove those states from the byspi list,<br />
since they shouldn&#39;t be there, and this shows up as a UAF the next<br />
time we go through the byspi list.