CVE-2025-38097

Source
https://nvd.nist.gov/vuln/detail/CVE-2025-38097
Import Source
https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2025-38097.json
JSON Data
https://api.osv.dev/v1/vulns/CVE-2025-38097
Downstream
Related
Published
2025-07-03T08:13:57Z
Modified
2025-10-22T12:39:21.659400Z
Summary
espintcp: remove encap socket caching to avoid reference leak
Details

In the Linux kernel, the following vulnerability has been resolved:

espintcp: remove encap socket caching to avoid reference leak

The current scheme for caching the encap socket can lead to reference leaks when we try to delete the netns.

The reference chain is: xfrmstate -> enacpsk -> netns

Since the encap socket is a userspace socket, it holds a reference on the netns. If we delete the espintcp state (through flush or individual delete) before removing the netns, the reference on the socket is dropped and the netns is correctly deleted. Otherwise, the netns may not be reachable anymore (if all processes within the ns have terminated), so we cannot delete the xfrm state to drop its reference on the socket.

This patch results in a small (~2% in my tests) performance regression.

A GC-type mechanism could be added for the socket cache, to clear references if the state hasn't been used "recently", but it's a lot more complex than just not caching the socket.

References

Affected packages

Git / git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git

Affected ranges

Type
GIT
Repo
https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git
Events
Introduced
e27cca96cd68fa2c6814c90f9a1cfd36bb68c593
Fixed
e4cde54b46a87231c77256a633be1bef62687d69
Type
GIT
Repo
https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git
Events
Introduced
e27cca96cd68fa2c6814c90f9a1cfd36bb68c593
Fixed
b58a295d10065960bcb9d60cb8ca6ead9837cd27
Type
GIT
Repo
https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git
Events
Introduced
e27cca96cd68fa2c6814c90f9a1cfd36bb68c593
Fixed
9cbca30102028f9ad3d2098f935c4368f581fd07
Type
GIT
Repo
https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git
Events
Introduced
e27cca96cd68fa2c6814c90f9a1cfd36bb68c593
Fixed
74fd327767fb784c5875cf7c4ba1217f26020943
Type
GIT
Repo
https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git
Events
Introduced
e27cca96cd68fa2c6814c90f9a1cfd36bb68c593
Fixed
028363685bd0b7a19b4a820f82dd905b1dc83999

Affected versions

v5.*

v5.10
v5.10-rc1
v5.10-rc2
v5.10-rc3
v5.10-rc4
v5.10-rc5
v5.10-rc6
v5.10-rc7
v5.11
v5.11-rc1
v5.11-rc2
v5.11-rc3
v5.11-rc4
v5.11-rc5
v5.11-rc6
v5.11-rc7
v5.12
v5.12-rc1
v5.12-rc1-dontuse
v5.12-rc2
v5.12-rc3
v5.12-rc4
v5.12-rc5
v5.12-rc6
v5.12-rc7
v5.12-rc8
v5.13
v5.13-rc1
v5.13-rc2
v5.13-rc3
v5.13-rc4
v5.13-rc5
v5.13-rc6
v5.13-rc7
v5.14
v5.14-rc1
v5.14-rc2
v5.14-rc3
v5.14-rc4
v5.14-rc5
v5.14-rc6
v5.14-rc7
v5.15
v5.15-rc1
v5.15-rc2
v5.15-rc3
v5.15-rc4
v5.15-rc5
v5.15-rc6
v5.15-rc7
v5.16
v5.16-rc1
v5.16-rc2
v5.16-rc3
v5.16-rc4
v5.16-rc5
v5.16-rc6
v5.16-rc7
v5.16-rc8
v5.17
v5.17-rc1
v5.17-rc2
v5.17-rc3
v5.17-rc4
v5.17-rc5
v5.17-rc6
v5.17-rc7
v5.17-rc8
v5.18
v5.18-rc1
v5.18-rc2
v5.18-rc3
v5.18-rc4
v5.18-rc5
v5.18-rc6
v5.18-rc7
v5.19
v5.19-rc1
v5.19-rc2
v5.19-rc3
v5.19-rc4
v5.19-rc5
v5.19-rc6
v5.19-rc7
v5.19-rc8
v5.5
v5.5-rc2
v5.5-rc3
v5.5-rc4
v5.5-rc5
v5.5-rc6
v5.5-rc7
v5.6
v5.6-rc1
v5.6-rc2
v5.6-rc3
v5.6-rc4
v5.6-rc5
v5.6-rc6
v5.6-rc7
v5.7
v5.7-rc1
v5.7-rc2
v5.7-rc3
v5.7-rc4
v5.7-rc5
v5.7-rc6
v5.7-rc7
v5.8
v5.8-rc1
v5.8-rc2
v5.8-rc3
v5.8-rc4
v5.8-rc5
v5.8-rc6
v5.8-rc7
v5.9
v5.9-rc1
v5.9-rc2
v5.9-rc3
v5.9-rc4
v5.9-rc5
v5.9-rc6
v5.9-rc7
v5.9-rc8

v6.*

v6.0
v6.0-rc1
v6.0-rc2
v6.0-rc3
v6.0-rc4
v6.0-rc5
v6.0-rc6
v6.0-rc7
v6.1
v6.1-rc1
v6.1-rc2
v6.1-rc3
v6.1-rc4
v6.1-rc5
v6.1-rc6
v6.1-rc7
v6.1-rc8
v6.1.1
v6.1.10
v6.1.100
v6.1.101
v6.1.102
v6.1.103
v6.1.104
v6.1.105
v6.1.106
v6.1.107
v6.1.108
v6.1.109
v6.1.11
v6.1.110
v6.1.111
v6.1.112
v6.1.113
v6.1.114
v6.1.115
v6.1.116
v6.1.117
v6.1.118
v6.1.119
v6.1.12
v6.1.120
v6.1.121
v6.1.122
v6.1.123
v6.1.124
v6.1.125
v6.1.126
v6.1.127
v6.1.128
v6.1.129
v6.1.13
v6.1.130
v6.1.131
v6.1.132
v6.1.133
v6.1.134
v6.1.135
v6.1.136
v6.1.137
v6.1.138
v6.1.139
v6.1.14
v6.1.140
v6.1.15
v6.1.16
v6.1.17
v6.1.18
v6.1.19
v6.1.2
v6.1.20
v6.1.21
v6.1.22
v6.1.23
v6.1.24
v6.1.25
v6.1.26
v6.1.27
v6.1.28
v6.1.29
v6.1.3
v6.1.30
v6.1.31
v6.1.32
v6.1.33
v6.1.34
v6.1.35
v6.1.36
v6.1.37
v6.1.38
v6.1.39
v6.1.4
v6.1.40
v6.1.41
v6.1.42
v6.1.43
v6.1.44
v6.1.45
v6.1.46
v6.1.47
v6.1.48
v6.1.49
v6.1.5
v6.1.50
v6.1.51
v6.1.52
v6.1.53
v6.1.54
v6.1.55
v6.1.56
v6.1.57
v6.1.58
v6.1.59
v6.1.6
v6.1.60
v6.1.61
v6.1.62
v6.1.63
v6.1.64
v6.1.65
v6.1.66
v6.1.67
v6.1.68
v6.1.69
v6.1.7
v6.1.70
v6.1.71
v6.1.72
v6.1.73
v6.1.74
v6.1.75
v6.1.76
v6.1.77
v6.1.78
v6.1.79
v6.1.8
v6.1.80
v6.1.81
v6.1.82
v6.1.83
v6.1.84
v6.1.85
v6.1.86
v6.1.87
v6.1.88
v6.1.89
v6.1.9
v6.1.90
v6.1.91
v6.1.92
v6.1.93
v6.1.94
v6.1.95
v6.1.96
v6.1.97
v6.1.98
v6.1.99
v6.10
v6.10-rc1
v6.10-rc2
v6.10-rc3
v6.10-rc4
v6.10-rc5
v6.10-rc6
v6.10-rc7
v6.11
v6.11-rc1
v6.11-rc2
v6.11-rc3
v6.11-rc4
v6.11-rc5
v6.11-rc6
v6.11-rc7
v6.12
v6.12-rc1
v6.12-rc2
v6.12-rc3
v6.12-rc4
v6.12-rc5
v6.12-rc6
v6.12-rc7
v6.12.1
v6.12.10
v6.12.11
v6.12.12
v6.12.13
v6.12.14
v6.12.15
v6.12.16
v6.12.17
v6.12.18
v6.12.19
v6.12.2
v6.12.20
v6.12.21
v6.12.22
v6.12.23
v6.12.24
v6.12.25
v6.12.26
v6.12.27
v6.12.28
v6.12.29
v6.12.3
v6.12.30
v6.12.4
v6.12.5
v6.12.6
v6.12.7
v6.12.8
v6.12.9
v6.13
v6.13-rc1
v6.13-rc2
v6.13-rc3
v6.13-rc4
v6.13-rc5
v6.13-rc6
v6.13-rc7
v6.14
v6.14-rc1
v6.14-rc2
v6.14-rc3
v6.14-rc4
v6.14-rc5
v6.14-rc6
v6.14-rc7
v6.14.1
v6.14.2
v6.14.3
v6.14.4
v6.14.5
v6.14.6
v6.14.7
v6.14.8
v6.15-rc1
v6.2
v6.2-rc1
v6.2-rc2
v6.2-rc3
v6.2-rc4
v6.2-rc5
v6.2-rc6
v6.2-rc7
v6.2-rc8
v6.3
v6.3-rc1
v6.3-rc2
v6.3-rc3
v6.3-rc4
v6.3-rc5
v6.3-rc6
v6.3-rc7
v6.4
v6.4-rc1
v6.4-rc2
v6.4-rc3
v6.4-rc4
v6.4-rc5
v6.4-rc6
v6.4-rc7
v6.5
v6.5-rc1
v6.5-rc2
v6.5-rc3
v6.5-rc4
v6.5-rc5
v6.5-rc6
v6.5-rc7
v6.6
v6.6-rc1
v6.6-rc2
v6.6-rc3
v6.6-rc4
v6.6-rc5
v6.6-rc6
v6.6-rc7
v6.6.1
v6.6.10
v6.6.11
v6.6.12
v6.6.13
v6.6.14
v6.6.15
v6.6.16
v6.6.17
v6.6.18
v6.6.19
v6.6.2
v6.6.20
v6.6.21
v6.6.22
v6.6.23
v6.6.24
v6.6.25
v6.6.26
v6.6.27
v6.6.28
v6.6.29
v6.6.3
v6.6.30
v6.6.31
v6.6.32
v6.6.33
v6.6.34
v6.6.35
v6.6.36
v6.6.37
v6.6.38
v6.6.39
v6.6.4
v6.6.40
v6.6.41
v6.6.42
v6.6.43
v6.6.44
v6.6.45
v6.6.46
v6.6.47
v6.6.48
v6.6.49
v6.6.5
v6.6.50
v6.6.51
v6.6.52
v6.6.53
v6.6.54
v6.6.55
v6.6.56
v6.6.57
v6.6.58
v6.6.59
v6.6.6
v6.6.60
v6.6.61
v6.6.62
v6.6.63
v6.6.64
v6.6.65
v6.6.66
v6.6.67
v6.6.68
v6.6.69
v6.6.7
v6.6.70
v6.6.71
v6.6.72
v6.6.73
v6.6.74
v6.6.75
v6.6.76
v6.6.77
v6.6.78
v6.6.79
v6.6.8
v6.6.80
v6.6.81
v6.6.82
v6.6.83
v6.6.84
v6.6.85
v6.6.86
v6.6.87
v6.6.88
v6.6.89
v6.6.9
v6.6.90
v6.6.91
v6.6.92
v6.7
v6.7-rc1
v6.7-rc2
v6.7-rc3
v6.7-rc4
v6.7-rc5
v6.7-rc6
v6.7-rc7
v6.7-rc8
v6.8
v6.8-rc1
v6.8-rc2
v6.8-rc3
v6.8-rc4
v6.8-rc5
v6.8-rc6
v6.8-rc7
v6.9
v6.9-rc1
v6.9-rc2
v6.9-rc3
v6.9-rc4
v6.9-rc5
v6.9-rc6
v6.9-rc7

Database specific

vanir_signatures

[
    {
        "id": "CVE-2025-38097-02bac171",
        "deprecated": false,
        "digest": {
            "line_hashes": [
                "162230942657808169119467315452658171965",
                "176168637973357644611469891244490587656",
                "56504700947841867323752161432772145498",
                "336189299989700529542870400860580164517",
                "212382351627512216874602859198439438565"
            ],
            "threshold": 0.9
        },
        "signature_version": "v1",
        "target": {
            "file": "net/xfrm/xfrm_state.c"
        },
        "source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@9cbca30102028f9ad3d2098f935c4368f581fd07",
        "signature_type": "Line"
    },
    {
        "id": "CVE-2025-38097-0891f957",
        "deprecated": false,
        "digest": {
            "line_hashes": [
                "192987496791001094848591497849647391148",
                "302144545038984735987151521544195301243",
                "283648139359135396106092847178721657165",
                "130191928809935862769113665366401045267",
                "23337921971899053205185189768866890890",
                "291393644357677545835170758827062305359",
                "298675279327290473547225934922951843016",
                "19605870416286391522608568706455895773",
                "7109568952732056965861186754863289971",
                "49444465011371349724002584147957014398",
                "73586959640831494223732333784304018705",
                "172637193178579346732365697327724591398",
                "168145512525854708178039555593923291680",
                "152913444319343725527278731415011656011",
                "237809572899647726328510764504930362247",
                "64039464688885797413720994271300500691",
                "100010497133045840425045516276857227045",
                "4191770988960871061773204002263606297",
                "41656139231711405080886265295796686632",
                "106229200098143346820841927653404262573",
                "215331047127320320970450263539722430130",
                "208439493255604467980431385623728498506",
                "18218207661583002249108569295911960324",
                "145818056611830058819117975905838986774",
                "165280635666507812352683759842092721484",
                "113195526902603549523983360502247342672",
                "116891655504435452526385725169315196526",
                "224642701633854046640930175717036306873",
                "171596880682222426440709531574099506864",
                "33554020081685799833007922984559666801",
                "69298025969947673467714316371222400593",
                "138060716022176861838199177913514394228",
                "69452122360052979352808853842484259954",
                "223115543539235798609126600533425420239",
                "15820116367251885444777597350211598433",
                "234898992348583905833294873291838769124",
                "238850217659025715959825509725813929983",
                "13086591632739374566467128075063513298",
                "138240209179677553809059860177153012166",
                "199314019529690058400660816048475730216",
                "202319708048082021257582482824122847634",
                "39261381077719297864958195466805137033",
                "12119073208115859331263549057797187300",
                "50906735909646081858510324763421993047",
                "266705342445824352467968718997295360715",
                "295373569703810657541795708087745742285",
                "321923836041983889092115029441823405589",
                "88937689371389946449279362350519327067",
                "275773687243243145337277916056452007753",
                "296038352478108710908157945401942829096",
                "229128718899410077197030359757904516454",
                "115022493743764139952025173980846437833",
                "60411187209689330148224072572422368084",
                "224242140303452394082946213596352684282",
                "240858200023277130021564565932593879119",
                "119991450193512865536617372733569341636",
                "251905078596276255956733021880875841847",
                "282435092061407985844860022735897780860",
                "179242025122788101216040429074831590877",
                "35495620688865627480856866629367050906",
                "302869928233523917727706318014027164740"
            ],
            "threshold": 0.9
        },
        "signature_version": "v1",
        "target": {
            "file": "net/ipv4/esp4.c"
        },
        "source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@74fd327767fb784c5875cf7c4ba1217f26020943",
        "signature_type": "Line"
    },
    {
        "id": "CVE-2025-38097-0ee955dc",
        "deprecated": false,
        "digest": {
            "length": 463.0,
            "function_hash": "339016323334023720983324533148060132193"
        },
        "signature_version": "v1",
        "target": {
            "function": "esp6_output_tcp_encap",
            "file": "net/ipv6/esp6.c"
        },
        "source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@b58a295d10065960bcb9d60cb8ca6ead9837cd27",
        "signature_type": "Function"
    },
    {
        "id": "CVE-2025-38097-0fbeff48",
        "deprecated": false,
        "digest": {
            "length": 1369.0,
            "function_hash": "254420376061558758313935904993406280377"
        },
        "signature_version": "v1",
        "target": {
            "function": "esp6_find_tcp_sk",
            "file": "net/ipv6/esp6.c"
        },
        "source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@028363685bd0b7a19b4a820f82dd905b1dc83999",
        "signature_type": "Function"
    },
    {
        "id": "CVE-2025-38097-0febddb8",
        "deprecated": false,
        "digest": {
            "line_hashes": [
                "99775104756857171574761361895695484291",
                "71218520079162882183916744000753604268",
                "180426684366618156943476940603922068188",
                "304264949770242372394690470764390000751"
            ],
            "threshold": 0.9
        },
        "signature_version": "v1",
        "target": {
            "file": "include/net/xfrm.h"
        },
        "source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@b58a295d10065960bcb9d60cb8ca6ead9837cd27",
        "signature_type": "Line"
    },
    {
        "id": "CVE-2025-38097-119a21a9",
        "deprecated": false,
        "digest": {
            "length": 655.0,
            "function_hash": "105763233114404487545523569213155866303"
        },
        "signature_version": "v1",
        "target": {
            "function": "__xfrm_state_delete",
            "file": "net/xfrm/xfrm_state.c"
        },
        "source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@b58a295d10065960bcb9d60cb8ca6ead9837cd27",
        "signature_type": "Function"
    },
    {
        "id": "CVE-2025-38097-152480b3",
        "deprecated": false,
        "digest": {
            "line_hashes": [
                "122376189121043076724022984415062113916",
                "131299715966363984312278577469921204886",
                "56504700947841867323752161432772145498",
                "336189299989700529542870400860580164517",
                "212382351627512216874602859198439438565"
            ],
            "threshold": 0.9
        },
        "signature_version": "v1",
        "target": {
            "file": "net/xfrm/xfrm_state.c"
        },
        "source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@b58a295d10065960bcb9d60cb8ca6ead9837cd27",
        "signature_type": "Line"
    },
    {
        "id": "CVE-2025-38097-17b0c881",
        "deprecated": false,
        "digest": {
            "line_hashes": [
                "99775104756857171574761361895695484291",
                "94569012879480310873314513946473572180",
                "58279449761786682806623431487811025411",
                "304544638459518325458551622269924812662"
            ],
            "threshold": 0.9
        },
        "signature_version": "v1",
        "target": {
            "file": "include/net/xfrm.h"
        },
        "source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@74fd327767fb784c5875cf7c4ba1217f26020943",
        "signature_type": "Line"
    },
    {
        "id": "CVE-2025-38097-191d7a40",
        "deprecated": false,
        "digest": {
            "length": 463.0,
            "function_hash": "339016323334023720983324533148060132193"
        },
        "signature_version": "v1",
        "target": {
            "function": "esp_output_tcp_encap",
            "file": "net/ipv4/esp4.c"
        },
        "source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@028363685bd0b7a19b4a820f82dd905b1dc83999",
        "signature_type": "Function"
    },
    {
        "id": "CVE-2025-38097-1e2c67e0",
        "deprecated": false,
        "digest": {
            "length": 366.0,
            "function_hash": "168040325944720706875342590799306287036"
        },
        "signature_version": "v1",
        "target": {
            "function": "esp_output_tcp_finish",
            "file": "net/ipv4/esp4.c"
        },
        "source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@9cbca30102028f9ad3d2098f935c4368f581fd07",
        "signature_type": "Function"
    },
    {
        "id": "CVE-2025-38097-20687ba1",
        "deprecated": false,
        "digest": {
            "length": 463.0,
            "function_hash": "339016323334023720983324533148060132193"
        },
        "signature_version": "v1",
        "target": {
            "function": "esp6_output_tcp_encap",
            "file": "net/ipv6/esp6.c"
        },
        "source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@74fd327767fb784c5875cf7c4ba1217f26020943",
        "signature_type": "Function"
    },
    {
        "id": "CVE-2025-38097-243ef0c5",
        "deprecated": false,
        "digest": {
            "length": 341.0,
            "function_hash": "103811662120127062348343333070462933278"
        },
        "signature_version": "v1",
        "target": {
            "function": "esp_output_tcp_finish",
            "file": "net/ipv4/esp4.c"
        },
        "source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@e4cde54b46a87231c77256a633be1bef62687d69",
        "signature_type": "Function"
    },
    {
        "id": "CVE-2025-38097-26a808fa",
        "deprecated": false,
        "digest": {
            "length": 655.0,
            "function_hash": "105763233114404487545523569213155866303"
        },
        "signature_version": "v1",
        "target": {
            "function": "__xfrm_state_delete",
            "file": "net/xfrm/xfrm_state.c"
        },
        "source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@e4cde54b46a87231c77256a633be1bef62687d69",
        "signature_type": "Function"
    },
    {
        "id": "CVE-2025-38097-27a22e79",
        "deprecated": false,
        "digest": {
            "line_hashes": [
                "143439080148568127022018139973215565529",
                "185892256461689152953937009794708180834",
                "235185014870353729202549403648778636479",
                "130191928809935862769113665366401045267",
                "23337921971899053205185189768866890890",
                "291393644357677545835170758827062305359",
                "298675279327290473547225934922951843016",
                "19605870416286391522608568706455895773",
                "7109568952732056965861186754863289971",
                "49444465011371349724002584147957014398",
                "134197900303377755641461364178735208302",
                "53855817676510606626231608130142435859",
                "217515246541844753853819615562531204924",
                "312466529586848701030119930928573180262",
                "237809572899647726328510764504930362247",
                "64039464688885797413720994271300500691",
                "100010497133045840425045516276857227045",
                "4191770988960871061773204002263606297",
                "41656139231711405080886265295796686632",
                "106229200098143346820841927653404262573",
                "215331047127320320970450263539722430130",
                "208439493255604467980431385623728498506",
                "18218207661583002249108569295911960324",
                "145818056611830058819117975905838986774",
                "165280635666507812352683759842092721484",
                "113195526902603549523983360502247342672",
                "116891655504435452526385725169315196526",
                "224642701633854046640930175717036306873",
                "171596880682222426440709531574099506864",
                "33554020081685799833007922984559666801",
                "69298025969947673467714316371222400593",
                "138060716022176861838199177913514394228",
                "69452122360052979352808853842484259954",
                "223115543539235798609126600533425420239",
                "15820116367251885444777597350211598433",
                "234898992348583905833294873291838769124",
                "238850217659025715959825509725813929983",
                "274019159964408544200428438528674948350",
                "260750309896504368161073275226275203461",
                "199314019529690058400660816048475730216",
                "202319708048082021257582482824122847634",
                "39261381077719297864958195466805137033",
                "12119073208115859331263549057797187300",
                "50906735909646081858510324763421993047",
                "266705342445824352467968718997295360715",
                "295373569703810657541795708087745742285",
                "321923836041983889092115029441823405589",
                "88937689371389946449279362350519327067",
                "275773687243243145337277916056452007753",
                "296038352478108710908157945401942829096",
                "229128718899410077197030359757904516454",
                "115022493743764139952025173980846437833",
                "60411187209689330148224072572422368084",
                "224242140303452394082946213596352684282",
                "240858200023277130021564565932593879119",
                "119991450193512865536617372733569341636",
                "251905078596276255956733021880875841847",
                "282435092061407985844860022735897780860",
                "179242025122788101216040429074831590877",
                "35495620688865627480856866629367050906",
                "302869928233523917727706318014027164740"
            ],
            "threshold": 0.9
        },
        "signature_version": "v1",
        "target": {
            "file": "net/ipv6/esp6.c"
        },
        "source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@028363685bd0b7a19b4a820f82dd905b1dc83999",
        "signature_type": "Line"
    },
    {
        "id": "CVE-2025-38097-27e97fe8",
        "deprecated": false,
        "digest": {
            "length": 164.0,
            "function_hash": "52637798694664015223747066925280878777"
        },
        "signature_version": "v1",
        "target": {
            "function": "esp_free_tcp_sk",
            "file": "net/ipv6/esp6.c"
        },
        "source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@e4cde54b46a87231c77256a633be1bef62687d69",
        "signature_type": "Function"
    },
    {
        "id": "CVE-2025-38097-317411d3",
        "deprecated": false,
        "digest": {
            "length": 463.0,
            "function_hash": "339016323334023720983324533148060132193"
        },
        "signature_version": "v1",
        "target": {
            "function": "esp6_output_tcp_encap",
            "file": "net/ipv6/esp6.c"
        },
        "source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@028363685bd0b7a19b4a820f82dd905b1dc83999",
        "signature_type": "Function"
    },
    {
        "id": "CVE-2025-38097-3213cc1d",
        "deprecated": false,
        "digest": {
            "length": 366.0,
            "function_hash": "168040325944720706875342590799306287036"
        },
        "signature_version": "v1",
        "target": {
            "function": "esp_output_tcp_finish",
            "file": "net/ipv6/esp6.c"
        },
        "source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@74fd327767fb784c5875cf7c4ba1217f26020943",
        "signature_type": "Function"
    },
    {
        "id": "CVE-2025-38097-35c44eb6",
        "deprecated": false,
        "digest": {
            "length": 463.0,
            "function_hash": "339016323334023720983324533148060132193"
        },
        "signature_version": "v1",
        "target": {
            "function": "esp6_output_tcp_encap",
            "file": "net/ipv6/esp6.c"
        },
        "source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@9cbca30102028f9ad3d2098f935c4368f581fd07",
        "signature_type": "Function"
    },
    {
        "id": "CVE-2025-38097-36c8adb5",
        "deprecated": false,
        "digest": {
            "length": 366.0,
            "function_hash": "168040325944720706875342590799306287036"
        },
        "signature_version": "v1",
        "target": {
            "function": "esp_output_tcp_finish",
            "file": "net/ipv6/esp6.c"
        },
        "source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@028363685bd0b7a19b4a820f82dd905b1dc83999",
        "signature_type": "Function"
    },
    {
        "id": "CVE-2025-38097-39edc942",
        "deprecated": false,
        "digest": {
            "line_hashes": [
                "89537660628805291498238600025795798410",
                "185892256461689152953937009794708180834",
                "235185014870353729202549403648778636479",
                "130191928809935862769113665366401045267",
                "23337921971899053205185189768866890890",
                "291393644357677545835170758827062305359",
                "298675279327290473547225934922951843016",
                "19605870416286391522608568706455895773",
                "7109568952732056965861186754863289971",
                "49444465011371349724002584147957014398",
                "134197900303377755641461364178735208302",
                "53855817676510606626231608130142435859",
                "217515246541844753853819615562531204924",
                "312466529586848701030119930928573180262",
                "237809572899647726328510764504930362247",
                "64039464688885797413720994271300500691",
                "100010497133045840425045516276857227045",
                "4191770988960871061773204002263606297",
                "41656139231711405080886265295796686632",
                "106229200098143346820841927653404262573",
                "215331047127320320970450263539722430130",
                "208439493255604467980431385623728498506",
                "18218207661583002249108569295911960324",
                "145818056611830058819117975905838986774",
                "165280635666507812352683759842092721484",
                "113195526902603549523983360502247342672",
                "116891655504435452526385725169315196526",
                "224642701633854046640930175717036306873",
                "171596880682222426440709531574099506864",
                "33554020081685799833007922984559666801",
                "69298025969947673467714316371222400593",
                "138060716022176861838199177913514394228",
                "69452122360052979352808853842484259954",
                "223115543539235798609126600533425420239",
                "15820116367251885444777597350211598433",
                "234898992348583905833294873291838769124",
                "238850217659025715959825509725813929983",
                "274019159964408544200428438528674948350",
                "260750309896504368161073275226275203461",
                "199314019529690058400660816048475730216",
                "202319708048082021257582482824122847634",
                "39261381077719297864958195466805137033",
                "12119073208115859331263549057797187300",
                "50906735909646081858510324763421993047",
                "266705342445824352467968718997295360715",
                "295373569703810657541795708087745742285",
                "321923836041983889092115029441823405589",
                "88937689371389946449279362350519327067",
                "275773687243243145337277916056452007753",
                "296038352478108710908157945401942829096",
                "229128718899410077197030359757904516454",
                "115022493743764139952025173980846437833",
                "60411187209689330148224072572422368084",
                "224242140303452394082946213596352684282",
                "240858200023277130021564565932593879119",
                "119991450193512865536617372733569341636",
                "251905078596276255956733021880875841847",
                "282435092061407985844860022735897780860",
                "179242025122788101216040429074831590877",
                "35495620688865627480856866629367050906",
                "302869928233523917727706318014027164740"
            ],
            "threshold": 0.9
        },
        "signature_version": "v1",
        "target": {
            "file": "net/ipv6/esp6.c"
        },
        "source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@b58a295d10065960bcb9d60cb8ca6ead9837cd27",
        "signature_type": "Line"
    },
    {
        "id": "CVE-2025-38097-403edf93",
        "deprecated": false,
        "digest": {
            "length": 164.0,
            "function_hash": "52637798694664015223747066925280878777"
        },
        "signature_version": "v1",
        "target": {
            "function": "esp_free_tcp_sk",
            "file": "net/ipv6/esp6.c"
        },
        "source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@74fd327767fb784c5875cf7c4ba1217f26020943",
        "signature_type": "Function"
    },
    {
        "id": "CVE-2025-38097-47915e9a",
        "deprecated": false,
        "digest": {
            "length": 854.0,
            "function_hash": "167433658527278429324941597733418249761"
        },
        "signature_version": "v1",
        "target": {
            "function": "__xfrm_state_delete",
            "file": "net/xfrm/xfrm_state.c"
        },
        "source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@028363685bd0b7a19b4a820f82dd905b1dc83999",
        "signature_type": "Function"
    },
    {
        "id": "CVE-2025-38097-4d77e171",
        "deprecated": false,
        "digest": {
            "line_hashes": [
                "198783268553943067762308014929138932656",
                "302144545038984735987151521544195301243",
                "283648139359135396106092847178721657165",
                "130191928809935862769113665366401045267",
                "23337921971899053205185189768866890890",
                "291393644357677545835170758827062305359",
                "298675279327290473547225934922951843016",
                "19605870416286391522608568706455895773",
                "7109568952732056965861186754863289971",
                "49444465011371349724002584147957014398",
                "73586959640831494223732333784304018705",
                "172637193178579346732365697327724591398",
                "168145512525854708178039555593923291680",
                "152913444319343725527278731415011656011",
                "237809572899647726328510764504930362247",
                "64039464688885797413720994271300500691",
                "100010497133045840425045516276857227045",
                "4191770988960871061773204002263606297",
                "41656139231711405080886265295796686632",
                "106229200098143346820841927653404262573",
                "215331047127320320970450263539722430130",
                "208439493255604467980431385623728498506",
                "18218207661583002249108569295911960324",
                "145818056611830058819117975905838986774",
                "165280635666507812352683759842092721484",
                "113195526902603549523983360502247342672",
                "116891655504435452526385725169315196526",
                "224642701633854046640930175717036306873",
                "171596880682222426440709531574099506864",
                "33554020081685799833007922984559666801",
                "69298025969947673467714316371222400593",
                "138060716022176861838199177913514394228",
                "69452122360052979352808853842484259954",
                "223115543539235798609126600533425420239",
                "15820116367251885444777597350211598433",
                "234898992348583905833294873291838769124",
                "238850217659025715959825509725813929983",
                "13086591632739374566467128075063513298",
                "138240209179677553809059860177153012166",
                "199314019529690058400660816048475730216",
                "202319708048082021257582482824122847634",
                "39261381077719297864958195466805137033",
                "12119073208115859331263549057797187300",
                "50906735909646081858510324763421993047",
                "266705342445824352467968718997295360715",
                "295373569703810657541795708087745742285",
                "321923836041983889092115029441823405589",
                "88937689371389946449279362350519327067",
                "275773687243243145337277916056452007753",
                "296038352478108710908157945401942829096",
                "229128718899410077197030359757904516454",
                "115022493743764139952025173980846437833",
                "60411187209689330148224072572422368084",
                "224242140303452394082946213596352684282",
                "240858200023277130021564565932593879119",
                "119991450193512865536617372733569341636",
                "251905078596276255956733021880875841847",
                "282435092061407985844860022735897780860",
                "179242025122788101216040429074831590877",
                "35495620688865627480856866629367050906",
                "302869928233523917727706318014027164740"
            ],
            "threshold": 0.9
        },
        "signature_version": "v1",
        "target": {
            "file": "net/ipv4/esp4.c"
        },
        "source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@b58a295d10065960bcb9d60cb8ca6ead9837cd27",
        "signature_type": "Line"
    },
    {
        "id": "CVE-2025-38097-4db43ef1",
        "deprecated": false,
        "digest": {
            "line_hashes": [
                "162230942657808169119467315452658171965",
                "176168637973357644611469891244490587656",
                "56504700947841867323752161432772145498",
                "336189299989700529542870400860580164517",
                "212382351627512216874602859198439438565"
            ],
            "threshold": 0.9
        },
        "signature_version": "v1",
        "target": {
            "file": "net/xfrm/xfrm_state.c"
        },
        "source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@028363685bd0b7a19b4a820f82dd905b1dc83999",
        "signature_type": "Line"
    },
    {
        "id": "CVE-2025-38097-517916a2",
        "deprecated": false,
        "digest": {
            "length": 164.0,
            "function_hash": "52637798694664015223747066925280878777"
        },
        "signature_version": "v1",
        "target": {
            "function": "esp_free_tcp_sk",
            "file": "net/ipv6/esp6.c"
        },
        "source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@9cbca30102028f9ad3d2098f935c4368f581fd07",
        "signature_type": "Function"
    },
    {
        "id": "CVE-2025-38097-56dcefc6",
        "deprecated": false,
        "digest": {
            "line_hashes": [
                "143439080148568127022018139973215565529",
                "185892256461689152953937009794708180834",
                "235185014870353729202549403648778636479",
                "130191928809935862769113665366401045267",
                "23337921971899053205185189768866890890",
                "291393644357677545835170758827062305359",
                "298675279327290473547225934922951843016",
                "19605870416286391522608568706455895773",
                "7109568952732056965861186754863289971",
                "49444465011371349724002584147957014398",
                "134197900303377755641461364178735208302",
                "53855817676510606626231608130142435859",
                "217515246541844753853819615562531204924",
                "312466529586848701030119930928573180262",
                "237809572899647726328510764504930362247",
                "64039464688885797413720994271300500691",
                "100010497133045840425045516276857227045",
                "4191770988960871061773204002263606297",
                "41656139231711405080886265295796686632",
                "106229200098143346820841927653404262573",
                "215331047127320320970450263539722430130",
                "208439493255604467980431385623728498506",
                "18218207661583002249108569295911960324",
                "145818056611830058819117975905838986774",
                "165280635666507812352683759842092721484",
                "113195526902603549523983360502247342672",
                "116891655504435452526385725169315196526",
                "224642701633854046640930175717036306873",
                "171596880682222426440709531574099506864",
                "33554020081685799833007922984559666801",
                "69298025969947673467714316371222400593",
                "138060716022176861838199177913514394228",
                "69452122360052979352808853842484259954",
                "223115543539235798609126600533425420239",
                "15820116367251885444777597350211598433",
                "234898992348583905833294873291838769124",
                "238850217659025715959825509725813929983",
                "274019159964408544200428438528674948350",
                "260750309896504368161073275226275203461",
                "199314019529690058400660816048475730216",
                "202319708048082021257582482824122847634",
                "39261381077719297864958195466805137033",
                "12119073208115859331263549057797187300",
                "50906735909646081858510324763421993047",
                "266705342445824352467968718997295360715",
                "295373569703810657541795708087745742285",
                "321923836041983889092115029441823405589",
                "88937689371389946449279362350519327067",
                "275773687243243145337277916056452007753",
                "296038352478108710908157945401942829096",
                "229128718899410077197030359757904516454",
                "115022493743764139952025173980846437833",
                "60411187209689330148224072572422368084",
                "224242140303452394082946213596352684282",
                "240858200023277130021564565932593879119",
                "119991450193512865536617372733569341636",
                "251905078596276255956733021880875841847",
                "282435092061407985844860022735897780860",
                "179242025122788101216040429074831590877",
                "35495620688865627480856866629367050906",
                "302869928233523917727706318014027164740"
            ],
            "threshold": 0.9
        },
        "signature_version": "v1",
        "target": {
            "file": "net/ipv6/esp6.c"
        },
        "source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@74fd327767fb784c5875cf7c4ba1217f26020943",
        "signature_type": "Line"
    },
    {
        "id": "CVE-2025-38097-5c68ed03",
        "deprecated": false,
        "digest": {
            "length": 463.0,
            "function_hash": "339016323334023720983324533148060132193"
        },
        "signature_version": "v1",
        "target": {
            "function": "esp_output_tcp_encap",
            "file": "net/ipv4/esp4.c"
        },
        "source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@74fd327767fb784c5875cf7c4ba1217f26020943",
        "signature_type": "Function"
    },
    {
        "id": "CVE-2025-38097-5ec8f621",
        "deprecated": false,
        "digest": {
            "length": 1346.0,
            "function_hash": "228667779304644839214846204178052589903"
        },
        "signature_version": "v1",
        "target": {
            "function": "esp_find_tcp_sk",
            "file": "net/ipv4/esp4.c"
        },
        "source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@b58a295d10065960bcb9d60cb8ca6ead9837cd27",
        "signature_type": "Function"
    },
    {
        "id": "CVE-2025-38097-63f71e0d",
        "deprecated": false,
        "digest": {
            "length": 1369.0,
            "function_hash": "254420376061558758313935904993406280377"
        },
        "signature_version": "v1",
        "target": {
            "function": "esp6_find_tcp_sk",
            "file": "net/ipv6/esp6.c"
        },
        "source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@b58a295d10065960bcb9d60cb8ca6ead9837cd27",
        "signature_type": "Function"
    },
    {
        "id": "CVE-2025-38097-6887cd68",
        "deprecated": false,
        "digest": {
            "length": 164.0,
            "function_hash": "52637798694664015223747066925280878777"
        },
        "signature_version": "v1",
        "target": {
            "function": "esp_free_tcp_sk",
            "file": "net/ipv4/esp4.c"
        },
        "source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@e4cde54b46a87231c77256a633be1bef62687d69",
        "signature_type": "Function"
    },
    {
        "id": "CVE-2025-38097-6a4a598e",
        "deprecated": false,
        "digest": {
            "length": 1346.0,
            "function_hash": "228667779304644839214846204178052589903"
        },
        "signature_version": "v1",
        "target": {
            "function": "esp_find_tcp_sk",
            "file": "net/ipv4/esp4.c"
        },
        "source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@74fd327767fb784c5875cf7c4ba1217f26020943",
        "signature_type": "Function"
    },
    {
        "id": "CVE-2025-38097-6f6f5385",
        "deprecated": false,
        "digest": {
            "length": 1346.0,
            "function_hash": "228667779304644839214846204178052589903"
        },
        "signature_version": "v1",
        "target": {
            "function": "esp_find_tcp_sk",
            "file": "net/ipv4/esp4.c"
        },
        "source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@9cbca30102028f9ad3d2098f935c4368f581fd07",
        "signature_type": "Function"
    },
    {
        "id": "CVE-2025-38097-70d1793b",
        "deprecated": false,
        "digest": {
            "line_hashes": [
                "122376189121043076724022984415062113916",
                "131299715966363984312278577469921204886",
                "56504700947841867323752161432772145498",
                "336189299989700529542870400860580164517",
                "212382351627512216874602859198439438565"
            ],
            "threshold": 0.9
        },
        "signature_version": "v1",
        "target": {
            "file": "net/xfrm/xfrm_state.c"
        },
        "source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@e4cde54b46a87231c77256a633be1bef62687d69",
        "signature_type": "Line"
    },
    {
        "id": "CVE-2025-38097-743ab39b",
        "deprecated": false,
        "digest": {
            "length": 463.0,
            "function_hash": "339016323334023720983324533148060132193"
        },
        "signature_version": "v1",
        "target": {
            "function": "esp_output_tcp_encap",
            "file": "net/ipv4/esp4.c"
        },
        "source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@9cbca30102028f9ad3d2098f935c4368f581fd07",
        "signature_type": "Function"
    },
    {
        "id": "CVE-2025-38097-754dc78a",
        "deprecated": false,
        "digest": {
            "length": 366.0,
            "function_hash": "168040325944720706875342590799306287036"
        },
        "signature_version": "v1",
        "target": {
            "function": "esp_output_tcp_finish",
            "file": "net/ipv4/esp4.c"
        },
        "source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@74fd327767fb784c5875cf7c4ba1217f26020943",
        "signature_type": "Function"
    },
    {
        "id": "CVE-2025-38097-76271aa8",
        "deprecated": false,
        "digest": {
            "length": 1369.0,
            "function_hash": "254420376061558758313935904993406280377"
        },
        "signature_version": "v1",
        "target": {
            "function": "esp6_find_tcp_sk",
            "file": "net/ipv6/esp6.c"
        },
        "source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@74fd327767fb784c5875cf7c4ba1217f26020943",
        "signature_type": "Function"
    },
    {
        "id": "CVE-2025-38097-7c8108a7",
        "deprecated": false,
        "digest": {
            "line_hashes": [
                "192987496791001094848591497849647391148",
                "302144545038984735987151521544195301243",
                "283648139359135396106092847178721657165",
                "130191928809935862769113665366401045267",
                "23337921971899053205185189768866890890",
                "291393644357677545835170758827062305359",
                "298675279327290473547225934922951843016",
                "19605870416286391522608568706455895773",
                "7109568952732056965861186754863289971",
                "49444465011371349724002584147957014398",
                "73586959640831494223732333784304018705",
                "172637193178579346732365697327724591398",
                "168145512525854708178039555593923291680",
                "152913444319343725527278731415011656011",
                "237809572899647726328510764504930362247",
                "64039464688885797413720994271300500691",
                "100010497133045840425045516276857227045",
                "4191770988960871061773204002263606297",
                "41656139231711405080886265295796686632",
                "106229200098143346820841927653404262573",
                "215331047127320320970450263539722430130",
                "208439493255604467980431385623728498506",
                "18218207661583002249108569295911960324",
                "145818056611830058819117975905838986774",
                "165280635666507812352683759842092721484",
                "113195526902603549523983360502247342672",
                "116891655504435452526385725169315196526",
                "224642701633854046640930175717036306873",
                "171596880682222426440709531574099506864",
                "33554020081685799833007922984559666801",
                "69298025969947673467714316371222400593",
                "138060716022176861838199177913514394228",
                "69452122360052979352808853842484259954",
                "223115543539235798609126600533425420239",
                "15820116367251885444777597350211598433",
                "234898992348583905833294873291838769124",
                "238850217659025715959825509725813929983",
                "13086591632739374566467128075063513298",
                "138240209179677553809059860177153012166",
                "199314019529690058400660816048475730216",
                "202319708048082021257582482824122847634",
                "39261381077719297864958195466805137033",
                "12119073208115859331263549057797187300",
                "50906735909646081858510324763421993047",
                "266705342445824352467968718997295360715",
                "295373569703810657541795708087745742285",
                "321923836041983889092115029441823405589",
                "88937689371389946449279362350519327067",
                "275773687243243145337277916056452007753",
                "296038352478108710908157945401942829096",
                "229128718899410077197030359757904516454",
                "115022493743764139952025173980846437833",
                "60411187209689330148224072572422368084",
                "224242140303452394082946213596352684282",
                "240858200023277130021564565932593879119",
                "119991450193512865536617372733569341636",
                "251905078596276255956733021880875841847",
                "282435092061407985844860022735897780860",
                "179242025122788101216040429074831590877",
                "35495620688865627480856866629367050906",
                "302869928233523917727706318014027164740"
            ],
            "threshold": 0.9
        },
        "signature_version": "v1",
        "target": {
            "file": "net/ipv4/esp4.c"
        },
        "source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@9cbca30102028f9ad3d2098f935c4368f581fd07",
        "signature_type": "Line"
    },
    {
        "id": "CVE-2025-38097-81c4c539",
        "deprecated": false,
        "digest": {
            "length": 164.0,
            "function_hash": "52637798694664015223747066925280878777"
        },
        "signature_version": "v1",
        "target": {
            "function": "esp_free_tcp_sk",
            "file": "net/ipv4/esp4.c"
        },
        "source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@028363685bd0b7a19b4a820f82dd905b1dc83999",
        "signature_type": "Function"
    },
    {
        "id": "CVE-2025-38097-8ebba648",
        "deprecated": false,
        "digest": {
            "length": 164.0,
            "function_hash": "52637798694664015223747066925280878777"
        },
        "signature_version": "v1",
        "target": {
            "function": "esp_free_tcp_sk",
            "file": "net/ipv4/esp4.c"
        },
        "source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@b58a295d10065960bcb9d60cb8ca6ead9837cd27",
        "signature_type": "Function"
    },
    {
        "id": "CVE-2025-38097-8f27fada",
        "deprecated": false,
        "digest": {
            "line_hashes": [
                "99775104756857171574761361895695484291",
                "94569012879480310873314513946473572180",
                "58279449761786682806623431487811025411",
                "304544638459518325458551622269924812662"
            ],
            "threshold": 0.9
        },
        "signature_version": "v1",
        "target": {
            "file": "include/net/xfrm.h"
        },
        "source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@028363685bd0b7a19b4a820f82dd905b1dc83999",
        "signature_type": "Line"
    },
    {
        "id": "CVE-2025-38097-908369ca",
        "deprecated": false,
        "digest": {
            "length": 1346.0,
            "function_hash": "228667779304644839214846204178052589903"
        },
        "signature_version": "v1",
        "target": {
            "function": "esp_find_tcp_sk",
            "file": "net/ipv4/esp4.c"
        },
        "source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@e4cde54b46a87231c77256a633be1bef62687d69",
        "signature_type": "Function"
    },
    {
        "id": "CVE-2025-38097-9c5cbcf4",
        "deprecated": false,
        "digest": {
            "line_hashes": [
                "192987496791001094848591497849647391148",
                "302144545038984735987151521544195301243",
                "283648139359135396106092847178721657165",
                "130191928809935862769113665366401045267",
                "23337921971899053205185189768866890890",
                "291393644357677545835170758827062305359",
                "298675279327290473547225934922951843016",
                "19605870416286391522608568706455895773",
                "7109568952732056965861186754863289971",
                "49444465011371349724002584147957014398",
                "73586959640831494223732333784304018705",
                "172637193178579346732365697327724591398",
                "168145512525854708178039555593923291680",
                "152913444319343725527278731415011656011",
                "237809572899647726328510764504930362247",
                "64039464688885797413720994271300500691",
                "100010497133045840425045516276857227045",
                "4191770988960871061773204002263606297",
                "41656139231711405080886265295796686632",
                "106229200098143346820841927653404262573",
                "215331047127320320970450263539722430130",
                "208439493255604467980431385623728498506",
                "18218207661583002249108569295911960324",
                "145818056611830058819117975905838986774",
                "165280635666507812352683759842092721484",
                "113195526902603549523983360502247342672",
                "116891655504435452526385725169315196526",
                "224642701633854046640930175717036306873",
                "171596880682222426440709531574099506864",
                "33554020081685799833007922984559666801",
                "69298025969947673467714316371222400593",
                "138060716022176861838199177913514394228",
                "69452122360052979352808853842484259954",
                "223115543539235798609126600533425420239",
                "15820116367251885444777597350211598433",
                "234898992348583905833294873291838769124",
                "238850217659025715959825509725813929983",
                "13086591632739374566467128075063513298",
                "138240209179677553809059860177153012166",
                "199314019529690058400660816048475730216",
                "202319708048082021257582482824122847634",
                "39261381077719297864958195466805137033",
                "12119073208115859331263549057797187300",
                "50906735909646081858510324763421993047",
                "266705342445824352467968718997295360715",
                "295373569703810657541795708087745742285",
                "321923836041983889092115029441823405589",
                "88937689371389946449279362350519327067",
                "275773687243243145337277916056452007753",
                "296038352478108710908157945401942829096",
                "229128718899410077197030359757904516454",
                "115022493743764139952025173980846437833",
                "60411187209689330148224072572422368084",
                "224242140303452394082946213596352684282",
                "240858200023277130021564565932593879119",
                "119991450193512865536617372733569341636",
                "251905078596276255956733021880875841847",
                "282435092061407985844860022735897780860",
                "179242025122788101216040429074831590877",
                "35495620688865627480856866629367050906",
                "302869928233523917727706318014027164740"
            ],
            "threshold": 0.9
        },
        "signature_version": "v1",
        "target": {
            "file": "net/ipv4/esp4.c"
        },
        "source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@028363685bd0b7a19b4a820f82dd905b1dc83999",
        "signature_type": "Line"
    },
    {
        "id": "CVE-2025-38097-9d97f0ad",
        "deprecated": false,
        "digest": {
            "length": 164.0,
            "function_hash": "52637798694664015223747066925280878777"
        },
        "signature_version": "v1",
        "target": {
            "function": "esp_free_tcp_sk",
            "file": "net/ipv4/esp4.c"
        },
        "source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@9cbca30102028f9ad3d2098f935c4368f581fd07",
        "signature_type": "Function"
    },
    {
        "id": "CVE-2025-38097-a23681c5",
        "deprecated": false,
        "digest": {
            "length": 463.0,
            "function_hash": "339016323334023720983324533148060132193"
        },
        "signature_version": "v1",
        "target": {
            "function": "esp6_output_tcp_encap",
            "file": "net/ipv6/esp6.c"
        },
        "source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@e4cde54b46a87231c77256a633be1bef62687d69",
        "signature_type": "Function"
    },
    {
        "id": "CVE-2025-38097-a2a118d8",
        "deprecated": false,
        "digest": {
            "length": 164.0,
            "function_hash": "52637798694664015223747066925280878777"
        },
        "signature_version": "v1",
        "target": {
            "function": "esp_free_tcp_sk",
            "file": "net/ipv4/esp4.c"
        },
        "source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@74fd327767fb784c5875cf7c4ba1217f26020943",
        "signature_type": "Function"
    },
    {
        "id": "CVE-2025-38097-a3030189",
        "deprecated": false,
        "digest": {
            "length": 366.0,
            "function_hash": "168040325944720706875342590799306287036"
        },
        "signature_version": "v1",
        "target": {
            "function": "esp_output_tcp_finish",
            "file": "net/ipv6/esp6.c"
        },
        "source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@9cbca30102028f9ad3d2098f935c4368f581fd07",
        "signature_type": "Function"
    },
    {
        "id": "CVE-2025-38097-a60ce757",
        "deprecated": false,
        "digest": {
            "length": 463.0,
            "function_hash": "339016323334023720983324533148060132193"
        },
        "signature_version": "v1",
        "target": {
            "function": "esp_output_tcp_encap",
            "file": "net/ipv4/esp4.c"
        },
        "source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@e4cde54b46a87231c77256a633be1bef62687d69",
        "signature_type": "Function"
    },
    {
        "id": "CVE-2025-38097-a6df3594",
        "deprecated": false,
        "digest": {
            "length": 1369.0,
            "function_hash": "254420376061558758313935904993406280377"
        },
        "signature_version": "v1",
        "target": {
            "function": "esp6_find_tcp_sk",
            "file": "net/ipv6/esp6.c"
        },
        "source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@9cbca30102028f9ad3d2098f935c4368f581fd07",
        "signature_type": "Function"
    },
    {
        "id": "CVE-2025-38097-aaf8e6e0",
        "deprecated": false,
        "digest": {
            "length": 463.0,
            "function_hash": "339016323334023720983324533148060132193"
        },
        "signature_version": "v1",
        "target": {
            "function": "esp_output_tcp_encap",
            "file": "net/ipv4/esp4.c"
        },
        "source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@b58a295d10065960bcb9d60cb8ca6ead9837cd27",
        "signature_type": "Function"
    },
    {
        "id": "CVE-2025-38097-acf77a1d",
        "deprecated": false,
        "digest": {
            "line_hashes": [
                "143439080148568127022018139973215565529",
                "185892256461689152953937009794708180834",
                "235185014870353729202549403648778636479",
                "130191928809935862769113665366401045267",
                "23337921971899053205185189768866890890",
                "291393644357677545835170758827062305359",
                "298675279327290473547225934922951843016",
                "19605870416286391522608568706455895773",
                "7109568952732056965861186754863289971",
                "49444465011371349724002584147957014398",
                "134197900303377755641461364178735208302",
                "53855817676510606626231608130142435859",
                "217515246541844753853819615562531204924",
                "312466529586848701030119930928573180262",
                "237809572899647726328510764504930362247",
                "64039464688885797413720994271300500691",
                "100010497133045840425045516276857227045",
                "4191770988960871061773204002263606297",
                "41656139231711405080886265295796686632",
                "106229200098143346820841927653404262573",
                "215331047127320320970450263539722430130",
                "208439493255604467980431385623728498506",
                "18218207661583002249108569295911960324",
                "145818056611830058819117975905838986774",
                "165280635666507812352683759842092721484",
                "113195526902603549523983360502247342672",
                "116891655504435452526385725169315196526",
                "224642701633854046640930175717036306873",
                "171596880682222426440709531574099506864",
                "33554020081685799833007922984559666801",
                "69298025969947673467714316371222400593",
                "138060716022176861838199177913514394228",
                "69452122360052979352808853842484259954",
                "223115543539235798609126600533425420239",
                "15820116367251885444777597350211598433",
                "234898992348583905833294873291838769124",
                "238850217659025715959825509725813929983",
                "274019159964408544200428438528674948350",
                "260750309896504368161073275226275203461",
                "199314019529690058400660816048475730216",
                "202319708048082021257582482824122847634",
                "39261381077719297864958195466805137033",
                "12119073208115859331263549057797187300",
                "50906735909646081858510324763421993047",
                "266705342445824352467968718997295360715",
                "295373569703810657541795708087745742285",
                "321923836041983889092115029441823405589",
                "88937689371389946449279362350519327067",
                "275773687243243145337277916056452007753",
                "296038352478108710908157945401942829096",
                "229128718899410077197030359757904516454",
                "115022493743764139952025173980846437833",
                "60411187209689330148224072572422368084",
                "224242140303452394082946213596352684282",
                "240858200023277130021564565932593879119",
                "119991450193512865536617372733569341636",
                "251905078596276255956733021880875841847",
                "282435092061407985844860022735897780860",
                "179242025122788101216040429074831590877",
                "35495620688865627480856866629367050906",
                "302869928233523917727706318014027164740"
            ],
            "threshold": 0.9
        },
        "signature_version": "v1",
        "target": {
            "file": "net/ipv6/esp6.c"
        },
        "source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@9cbca30102028f9ad3d2098f935c4368f581fd07",
        "signature_type": "Line"
    },
    {
        "id": "CVE-2025-38097-af6a4467",
        "deprecated": false,
        "digest": {
            "length": 164.0,
            "function_hash": "52637798694664015223747066925280878777"
        },
        "signature_version": "v1",
        "target": {
            "function": "esp_free_tcp_sk",
            "file": "net/ipv6/esp6.c"
        },
        "source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@b58a295d10065960bcb9d60cb8ca6ead9837cd27",
        "signature_type": "Function"
    },
    {
        "id": "CVE-2025-38097-bce4a188",
        "deprecated": false,
        "digest": {
            "length": 341.0,
            "function_hash": "103811662120127062348343333070462933278"
        },
        "signature_version": "v1",
        "target": {
            "function": "esp_output_tcp_finish",
            "file": "net/ipv6/esp6.c"
        },
        "source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@b58a295d10065960bcb9d60cb8ca6ead9837cd27",
        "signature_type": "Function"
    },
    {
        "id": "CVE-2025-38097-cbe330e3",
        "deprecated": false,
        "digest": {
            "line_hashes": [
                "28778533059872847144469451203821640695",
                "302144545038984735987151521544195301243",
                "283648139359135396106092847178721657165",
                "130191928809935862769113665366401045267",
                "23337921971899053205185189768866890890",
                "291393644357677545835170758827062305359",
                "298675279327290473547225934922951843016",
                "19605870416286391522608568706455895773",
                "7109568952732056965861186754863289971",
                "49444465011371349724002584147957014398",
                "73586959640831494223732333784304018705",
                "172637193178579346732365697327724591398",
                "168145512525854708178039555593923291680",
                "152913444319343725527278731415011656011",
                "237809572899647726328510764504930362247",
                "64039464688885797413720994271300500691",
                "100010497133045840425045516276857227045",
                "4191770988960871061773204002263606297",
                "41656139231711405080886265295796686632",
                "106229200098143346820841927653404262573",
                "215331047127320320970450263539722430130",
                "208439493255604467980431385623728498506",
                "18218207661583002249108569295911960324",
                "145818056611830058819117975905838986774",
                "165280635666507812352683759842092721484",
                "113195526902603549523983360502247342672",
                "116891655504435452526385725169315196526",
                "224642701633854046640930175717036306873",
                "171596880682222426440709531574099506864",
                "33554020081685799833007922984559666801",
                "69298025969947673467714316371222400593",
                "138060716022176861838199177913514394228",
                "69452122360052979352808853842484259954",
                "223115543539235798609126600533425420239",
                "15820116367251885444777597350211598433",
                "234898992348583905833294873291838769124",
                "238850217659025715959825509725813929983",
                "13086591632739374566467128075063513298",
                "138240209179677553809059860177153012166",
                "199314019529690058400660816048475730216",
                "202319708048082021257582482824122847634",
                "39261381077719297864958195466805137033",
                "12119073208115859331263549057797187300",
                "50906735909646081858510324763421993047",
                "266705342445824352467968718997295360715",
                "295373569703810657541795708087745742285",
                "321923836041983889092115029441823405589",
                "88937689371389946449279362350519327067",
                "275773687243243145337277916056452007753",
                "296038352478108710908157945401942829096",
                "229128718899410077197030359757904516454",
                "115022493743764139952025173980846437833",
                "60411187209689330148224072572422368084",
                "224242140303452394082946213596352684282",
                "240858200023277130021564565932593879119",
                "119991450193512865536617372733569341636",
                "251905078596276255956733021880875841847",
                "282435092061407985844860022735897780860",
                "179242025122788101216040429074831590877",
                "35495620688865627480856866629367050906",
                "302869928233523917727706318014027164740"
            ],
            "threshold": 0.9
        },
        "signature_version": "v1",
        "target": {
            "file": "net/ipv4/esp4.c"
        },
        "source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@e4cde54b46a87231c77256a633be1bef62687d69",
        "signature_type": "Line"
    },
    {
        "id": "CVE-2025-38097-cdd87178",
        "deprecated": false,
        "digest": {
            "length": 341.0,
            "function_hash": "103811662120127062348343333070462933278"
        },
        "signature_version": "v1",
        "target": {
            "function": "esp_output_tcp_finish",
            "file": "net/ipv4/esp4.c"
        },
        "source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@b58a295d10065960bcb9d60cb8ca6ead9837cd27",
        "signature_type": "Function"
    },
    {
        "id": "CVE-2025-38097-d4d9f0c3",
        "deprecated": false,
        "digest": {
            "line_hashes": [
                "108256990008591336964182748424493071812",
                "185892256461689152953937009794708180834",
                "235185014870353729202549403648778636479",
                "130191928809935862769113665366401045267",
                "23337921971899053205185189768866890890",
                "291393644357677545835170758827062305359",
                "298675279327290473547225934922951843016",
                "19605870416286391522608568706455895773",
                "7109568952732056965861186754863289971",
                "49444465011371349724002584147957014398",
                "134197900303377755641461364178735208302",
                "53855817676510606626231608130142435859",
                "217515246541844753853819615562531204924",
                "312466529586848701030119930928573180262",
                "237809572899647726328510764504930362247",
                "64039464688885797413720994271300500691",
                "100010497133045840425045516276857227045",
                "4191770988960871061773204002263606297",
                "41656139231711405080886265295796686632",
                "106229200098143346820841927653404262573",
                "215331047127320320970450263539722430130",
                "208439493255604467980431385623728498506",
                "18218207661583002249108569295911960324",
                "145818056611830058819117975905838986774",
                "165280635666507812352683759842092721484",
                "113195526902603549523983360502247342672",
                "116891655504435452526385725169315196526",
                "224642701633854046640930175717036306873",
                "171596880682222426440709531574099506864",
                "33554020081685799833007922984559666801",
                "69298025969947673467714316371222400593",
                "138060716022176861838199177913514394228",
                "69452122360052979352808853842484259954",
                "223115543539235798609126600533425420239",
                "15820116367251885444777597350211598433",
                "234898992348583905833294873291838769124",
                "238850217659025715959825509725813929983",
                "274019159964408544200428438528674948350",
                "260750309896504368161073275226275203461",
                "199314019529690058400660816048475730216",
                "202319708048082021257582482824122847634",
                "39261381077719297864958195466805137033",
                "12119073208115859331263549057797187300",
                "50906735909646081858510324763421993047",
                "266705342445824352467968718997295360715",
                "295373569703810657541795708087745742285",
                "321923836041983889092115029441823405589",
                "88937689371389946449279362350519327067",
                "275773687243243145337277916056452007753",
                "296038352478108710908157945401942829096",
                "229128718899410077197030359757904516454",
                "115022493743764139952025173980846437833",
                "60411187209689330148224072572422368084",
                "224242140303452394082946213596352684282",
                "240858200023277130021564565932593879119",
                "119991450193512865536617372733569341636",
                "251905078596276255956733021880875841847",
                "282435092061407985844860022735897780860",
                "179242025122788101216040429074831590877",
                "35495620688865627480856866629367050906",
                "302869928233523917727706318014027164740"
            ],
            "threshold": 0.9
        },
        "signature_version": "v1",
        "target": {
            "file": "net/ipv6/esp6.c"
        },
        "source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@e4cde54b46a87231c77256a633be1bef62687d69",
        "signature_type": "Line"
    },
    {
        "id": "CVE-2025-38097-d6e9af25",
        "deprecated": false,
        "digest": {
            "line_hashes": [
                "99775104756857171574761361895695484291",
                "94569012879480310873314513946473572180",
                "58279449761786682806623431487811025411",
                "304544638459518325458551622269924812662"
            ],
            "threshold": 0.9
        },
        "signature_version": "v1",
        "target": {
            "file": "include/net/xfrm.h"
        },
        "source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@9cbca30102028f9ad3d2098f935c4368f581fd07",
        "signature_type": "Line"
    },
    {
        "id": "CVE-2025-38097-d87dbfc9",
        "deprecated": false,
        "digest": {
            "length": 1369.0,
            "function_hash": "254420376061558758313935904993406280377"
        },
        "signature_version": "v1",
        "target": {
            "function": "esp6_find_tcp_sk",
            "file": "net/ipv6/esp6.c"
        },
        "source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@e4cde54b46a87231c77256a633be1bef62687d69",
        "signature_type": "Function"
    },
    {
        "id": "CVE-2025-38097-d924215f",
        "deprecated": false,
        "digest": {
            "length": 854.0,
            "function_hash": "167433658527278429324941597733418249761"
        },
        "signature_version": "v1",
        "target": {
            "function": "__xfrm_state_delete",
            "file": "net/xfrm/xfrm_state.c"
        },
        "source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@9cbca30102028f9ad3d2098f935c4368f581fd07",
        "signature_type": "Function"
    },
    {
        "id": "CVE-2025-38097-dd7ecf51",
        "deprecated": false,
        "digest": {
            "line_hashes": [
                "162230942657808169119467315452658171965",
                "176168637973357644611469891244490587656",
                "56504700947841867323752161432772145498",
                "336189299989700529542870400860580164517",
                "212382351627512216874602859198439438565"
            ],
            "threshold": 0.9
        },
        "signature_version": "v1",
        "target": {
            "file": "net/xfrm/xfrm_state.c"
        },
        "source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@74fd327767fb784c5875cf7c4ba1217f26020943",
        "signature_type": "Line"
    },
    {
        "id": "CVE-2025-38097-e175f71b",
        "deprecated": false,
        "digest": {
            "length": 341.0,
            "function_hash": "103811662120127062348343333070462933278"
        },
        "signature_version": "v1",
        "target": {
            "function": "esp_output_tcp_finish",
            "file": "net/ipv6/esp6.c"
        },
        "source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@e4cde54b46a87231c77256a633be1bef62687d69",
        "signature_type": "Function"
    },
    {
        "id": "CVE-2025-38097-e5fc8801",
        "deprecated": false,
        "digest": {
            "length": 164.0,
            "function_hash": "52637798694664015223747066925280878777"
        },
        "signature_version": "v1",
        "target": {
            "function": "esp_free_tcp_sk",
            "file": "net/ipv6/esp6.c"
        },
        "source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@028363685bd0b7a19b4a820f82dd905b1dc83999",
        "signature_type": "Function"
    },
    {
        "id": "CVE-2025-38097-f336cbf8",
        "deprecated": false,
        "digest": {
            "line_hashes": [
                "99775104756857171574761361895695484291",
                "71218520079162882183916744000753604268",
                "180426684366618156943476940603922068188",
                "304264949770242372394690470764390000751"
            ],
            "threshold": 0.9
        },
        "signature_version": "v1",
        "target": {
            "file": "include/net/xfrm.h"
        },
        "source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@e4cde54b46a87231c77256a633be1bef62687d69",
        "signature_type": "Line"
    },
    {
        "id": "CVE-2025-38097-f4e173cb",
        "deprecated": false,
        "digest": {
            "length": 366.0,
            "function_hash": "168040325944720706875342590799306287036"
        },
        "signature_version": "v1",
        "target": {
            "function": "esp_output_tcp_finish",
            "file": "net/ipv4/esp4.c"
        },
        "source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@028363685bd0b7a19b4a820f82dd905b1dc83999",
        "signature_type": "Function"
    },
    {
        "id": "CVE-2025-38097-f9fc660d",
        "deprecated": false,
        "digest": {
            "length": 1346.0,
            "function_hash": "228667779304644839214846204178052589903"
        },
        "signature_version": "v1",
        "target": {
            "function": "esp_find_tcp_sk",
            "file": "net/ipv4/esp4.c"
        },
        "source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@028363685bd0b7a19b4a820f82dd905b1dc83999",
        "signature_type": "Function"
    },
    {
        "id": "CVE-2025-38097-fccfaa6f",
        "deprecated": false,
        "digest": {
            "length": 854.0,
            "function_hash": "167433658527278429324941597733418249761"
        },
        "signature_version": "v1",
        "target": {
            "function": "__xfrm_state_delete",
            "file": "net/xfrm/xfrm_state.c"
        },
        "source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@74fd327767fb784c5875cf7c4ba1217f26020943",
        "signature_type": "Function"
    }
]

Linux / Kernel

Package

Name
Kernel

Affected ranges

Type
ECOSYSTEM
Events
Introduced
5.6.0
Fixed
6.1.141
Type
ECOSYSTEM
Events
Introduced
6.2.0
Fixed
6.6.93
Type
ECOSYSTEM
Events
Introduced
6.7.0
Fixed
6.12.31
Type
ECOSYSTEM
Events
Introduced
6.13.0
Fixed
6.14.9