The vulnerability of the xfrm_alloc_spi() function in the net/xfrm/xfrm_state.c module, which is part of the Linux kernel’s networking functions, allows a attacker to compromise the confidentiality, integrity, and accessibility of the protected information.

The vulnerability of the xfrmallocspi function in the net/xfrm/xfrmstate.c module, which implements networking functions in the Linux kernel, is related to insufficient checks for data uniqueness during searches. Exploiting this vulnerability could allow an attacker to compromise the...

CVE-2025-39965

CVE-2025-39965 concerns the Linux kernel where xfrm_alloc_spi incorrectly treated 0 as a valid SPI. A state with x->id.spi == 0 was added to the byspi list, and __xfrm_state_delete failed to remove such states, leading to a use-after-free vulnerability on list traversal. The issue is resolved ...