In the Linux kernel, the following vulnerability has been resolved:
espintcp: remove encap socket caching to avoid reference leak
The current scheme for caching the encap socket can lead to reference leaks when we try to delete the netns.
The reference chain is: xfrmstate -> enacpsk -> netns
Since the encap socket is a userspace socket, it holds a reference on the netns. If we delete the espintcp state (through flush or individual delete) before removing the netns, the reference on the socket is dropped and the netns is correctly deleted. Otherwise, the netns may not be reachable anymore (if all processes within the ns have terminated), so we cannot delete the xfrm state to drop its reference on the socket.
This patch results in a small (~2% in my tests) performance regression.
A GC-type mechanism could be added for the socket cache, to clear references if the state hasn't been used "recently", but it's a lot more complex than just not caching the socket.
[
{
"id": "CVE-2025-38097-02bac171",
"deprecated": false,
"digest": {
"line_hashes": [
"162230942657808169119467315452658171965",
"176168637973357644611469891244490587656",
"56504700947841867323752161432772145498",
"336189299989700529542870400860580164517",
"212382351627512216874602859198439438565"
],
"threshold": 0.9
},
"signature_version": "v1",
"target": {
"file": "net/xfrm/xfrm_state.c"
},
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@9cbca30102028f9ad3d2098f935c4368f581fd07",
"signature_type": "Line"
},
{
"id": "CVE-2025-38097-0891f957",
"deprecated": false,
"digest": {
"line_hashes": [
"192987496791001094848591497849647391148",
"302144545038984735987151521544195301243",
"283648139359135396106092847178721657165",
"130191928809935862769113665366401045267",
"23337921971899053205185189768866890890",
"291393644357677545835170758827062305359",
"298675279327290473547225934922951843016",
"19605870416286391522608568706455895773",
"7109568952732056965861186754863289971",
"49444465011371349724002584147957014398",
"73586959640831494223732333784304018705",
"172637193178579346732365697327724591398",
"168145512525854708178039555593923291680",
"152913444319343725527278731415011656011",
"237809572899647726328510764504930362247",
"64039464688885797413720994271300500691",
"100010497133045840425045516276857227045",
"4191770988960871061773204002263606297",
"41656139231711405080886265295796686632",
"106229200098143346820841927653404262573",
"215331047127320320970450263539722430130",
"208439493255604467980431385623728498506",
"18218207661583002249108569295911960324",
"145818056611830058819117975905838986774",
"165280635666507812352683759842092721484",
"113195526902603549523983360502247342672",
"116891655504435452526385725169315196526",
"224642701633854046640930175717036306873",
"171596880682222426440709531574099506864",
"33554020081685799833007922984559666801",
"69298025969947673467714316371222400593",
"138060716022176861838199177913514394228",
"69452122360052979352808853842484259954",
"223115543539235798609126600533425420239",
"15820116367251885444777597350211598433",
"234898992348583905833294873291838769124",
"238850217659025715959825509725813929983",
"13086591632739374566467128075063513298",
"138240209179677553809059860177153012166",
"199314019529690058400660816048475730216",
"202319708048082021257582482824122847634",
"39261381077719297864958195466805137033",
"12119073208115859331263549057797187300",
"50906735909646081858510324763421993047",
"266705342445824352467968718997295360715",
"295373569703810657541795708087745742285",
"321923836041983889092115029441823405589",
"88937689371389946449279362350519327067",
"275773687243243145337277916056452007753",
"296038352478108710908157945401942829096",
"229128718899410077197030359757904516454",
"115022493743764139952025173980846437833",
"60411187209689330148224072572422368084",
"224242140303452394082946213596352684282",
"240858200023277130021564565932593879119",
"119991450193512865536617372733569341636",
"251905078596276255956733021880875841847",
"282435092061407985844860022735897780860",
"179242025122788101216040429074831590877",
"35495620688865627480856866629367050906",
"302869928233523917727706318014027164740"
],
"threshold": 0.9
},
"signature_version": "v1",
"target": {
"file": "net/ipv4/esp4.c"
},
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@74fd327767fb784c5875cf7c4ba1217f26020943",
"signature_type": "Line"
},
{
"id": "CVE-2025-38097-0ee955dc",
"deprecated": false,
"digest": {
"length": 463.0,
"function_hash": "339016323334023720983324533148060132193"
},
"signature_version": "v1",
"target": {
"function": "esp6_output_tcp_encap",
"file": "net/ipv6/esp6.c"
},
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@b58a295d10065960bcb9d60cb8ca6ead9837cd27",
"signature_type": "Function"
},
{
"id": "CVE-2025-38097-0fbeff48",
"deprecated": false,
"digest": {
"length": 1369.0,
"function_hash": "254420376061558758313935904993406280377"
},
"signature_version": "v1",
"target": {
"function": "esp6_find_tcp_sk",
"file": "net/ipv6/esp6.c"
},
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@028363685bd0b7a19b4a820f82dd905b1dc83999",
"signature_type": "Function"
},
{
"id": "CVE-2025-38097-0febddb8",
"deprecated": false,
"digest": {
"line_hashes": [
"99775104756857171574761361895695484291",
"71218520079162882183916744000753604268",
"180426684366618156943476940603922068188",
"304264949770242372394690470764390000751"
],
"threshold": 0.9
},
"signature_version": "v1",
"target": {
"file": "include/net/xfrm.h"
},
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@b58a295d10065960bcb9d60cb8ca6ead9837cd27",
"signature_type": "Line"
},
{
"id": "CVE-2025-38097-119a21a9",
"deprecated": false,
"digest": {
"length": 655.0,
"function_hash": "105763233114404487545523569213155866303"
},
"signature_version": "v1",
"target": {
"function": "__xfrm_state_delete",
"file": "net/xfrm/xfrm_state.c"
},
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@b58a295d10065960bcb9d60cb8ca6ead9837cd27",
"signature_type": "Function"
},
{
"id": "CVE-2025-38097-152480b3",
"deprecated": false,
"digest": {
"line_hashes": [
"122376189121043076724022984415062113916",
"131299715966363984312278577469921204886",
"56504700947841867323752161432772145498",
"336189299989700529542870400860580164517",
"212382351627512216874602859198439438565"
],
"threshold": 0.9
},
"signature_version": "v1",
"target": {
"file": "net/xfrm/xfrm_state.c"
},
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@b58a295d10065960bcb9d60cb8ca6ead9837cd27",
"signature_type": "Line"
},
{
"id": "CVE-2025-38097-17b0c881",
"deprecated": false,
"digest": {
"line_hashes": [
"99775104756857171574761361895695484291",
"94569012879480310873314513946473572180",
"58279449761786682806623431487811025411",
"304544638459518325458551622269924812662"
],
"threshold": 0.9
},
"signature_version": "v1",
"target": {
"file": "include/net/xfrm.h"
},
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@74fd327767fb784c5875cf7c4ba1217f26020943",
"signature_type": "Line"
},
{
"id": "CVE-2025-38097-191d7a40",
"deprecated": false,
"digest": {
"length": 463.0,
"function_hash": "339016323334023720983324533148060132193"
},
"signature_version": "v1",
"target": {
"function": "esp_output_tcp_encap",
"file": "net/ipv4/esp4.c"
},
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@028363685bd0b7a19b4a820f82dd905b1dc83999",
"signature_type": "Function"
},
{
"id": "CVE-2025-38097-1e2c67e0",
"deprecated": false,
"digest": {
"length": 366.0,
"function_hash": "168040325944720706875342590799306287036"
},
"signature_version": "v1",
"target": {
"function": "esp_output_tcp_finish",
"file": "net/ipv4/esp4.c"
},
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@9cbca30102028f9ad3d2098f935c4368f581fd07",
"signature_type": "Function"
},
{
"id": "CVE-2025-38097-20687ba1",
"deprecated": false,
"digest": {
"length": 463.0,
"function_hash": "339016323334023720983324533148060132193"
},
"signature_version": "v1",
"target": {
"function": "esp6_output_tcp_encap",
"file": "net/ipv6/esp6.c"
},
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@74fd327767fb784c5875cf7c4ba1217f26020943",
"signature_type": "Function"
},
{
"id": "CVE-2025-38097-243ef0c5",
"deprecated": false,
"digest": {
"length": 341.0,
"function_hash": "103811662120127062348343333070462933278"
},
"signature_version": "v1",
"target": {
"function": "esp_output_tcp_finish",
"file": "net/ipv4/esp4.c"
},
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@e4cde54b46a87231c77256a633be1bef62687d69",
"signature_type": "Function"
},
{
"id": "CVE-2025-38097-26a808fa",
"deprecated": false,
"digest": {
"length": 655.0,
"function_hash": "105763233114404487545523569213155866303"
},
"signature_version": "v1",
"target": {
"function": "__xfrm_state_delete",
"file": "net/xfrm/xfrm_state.c"
},
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@e4cde54b46a87231c77256a633be1bef62687d69",
"signature_type": "Function"
},
{
"id": "CVE-2025-38097-27a22e79",
"deprecated": false,
"digest": {
"line_hashes": [
"143439080148568127022018139973215565529",
"185892256461689152953937009794708180834",
"235185014870353729202549403648778636479",
"130191928809935862769113665366401045267",
"23337921971899053205185189768866890890",
"291393644357677545835170758827062305359",
"298675279327290473547225934922951843016",
"19605870416286391522608568706455895773",
"7109568952732056965861186754863289971",
"49444465011371349724002584147957014398",
"134197900303377755641461364178735208302",
"53855817676510606626231608130142435859",
"217515246541844753853819615562531204924",
"312466529586848701030119930928573180262",
"237809572899647726328510764504930362247",
"64039464688885797413720994271300500691",
"100010497133045840425045516276857227045",
"4191770988960871061773204002263606297",
"41656139231711405080886265295796686632",
"106229200098143346820841927653404262573",
"215331047127320320970450263539722430130",
"208439493255604467980431385623728498506",
"18218207661583002249108569295911960324",
"145818056611830058819117975905838986774",
"165280635666507812352683759842092721484",
"113195526902603549523983360502247342672",
"116891655504435452526385725169315196526",
"224642701633854046640930175717036306873",
"171596880682222426440709531574099506864",
"33554020081685799833007922984559666801",
"69298025969947673467714316371222400593",
"138060716022176861838199177913514394228",
"69452122360052979352808853842484259954",
"223115543539235798609126600533425420239",
"15820116367251885444777597350211598433",
"234898992348583905833294873291838769124",
"238850217659025715959825509725813929983",
"274019159964408544200428438528674948350",
"260750309896504368161073275226275203461",
"199314019529690058400660816048475730216",
"202319708048082021257582482824122847634",
"39261381077719297864958195466805137033",
"12119073208115859331263549057797187300",
"50906735909646081858510324763421993047",
"266705342445824352467968718997295360715",
"295373569703810657541795708087745742285",
"321923836041983889092115029441823405589",
"88937689371389946449279362350519327067",
"275773687243243145337277916056452007753",
"296038352478108710908157945401942829096",
"229128718899410077197030359757904516454",
"115022493743764139952025173980846437833",
"60411187209689330148224072572422368084",
"224242140303452394082946213596352684282",
"240858200023277130021564565932593879119",
"119991450193512865536617372733569341636",
"251905078596276255956733021880875841847",
"282435092061407985844860022735897780860",
"179242025122788101216040429074831590877",
"35495620688865627480856866629367050906",
"302869928233523917727706318014027164740"
],
"threshold": 0.9
},
"signature_version": "v1",
"target": {
"file": "net/ipv6/esp6.c"
},
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@028363685bd0b7a19b4a820f82dd905b1dc83999",
"signature_type": "Line"
},
{
"id": "CVE-2025-38097-27e97fe8",
"deprecated": false,
"digest": {
"length": 164.0,
"function_hash": "52637798694664015223747066925280878777"
},
"signature_version": "v1",
"target": {
"function": "esp_free_tcp_sk",
"file": "net/ipv6/esp6.c"
},
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@e4cde54b46a87231c77256a633be1bef62687d69",
"signature_type": "Function"
},
{
"id": "CVE-2025-38097-317411d3",
"deprecated": false,
"digest": {
"length": 463.0,
"function_hash": "339016323334023720983324533148060132193"
},
"signature_version": "v1",
"target": {
"function": "esp6_output_tcp_encap",
"file": "net/ipv6/esp6.c"
},
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@028363685bd0b7a19b4a820f82dd905b1dc83999",
"signature_type": "Function"
},
{
"id": "CVE-2025-38097-3213cc1d",
"deprecated": false,
"digest": {
"length": 366.0,
"function_hash": "168040325944720706875342590799306287036"
},
"signature_version": "v1",
"target": {
"function": "esp_output_tcp_finish",
"file": "net/ipv6/esp6.c"
},
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@74fd327767fb784c5875cf7c4ba1217f26020943",
"signature_type": "Function"
},
{
"id": "CVE-2025-38097-35c44eb6",
"deprecated": false,
"digest": {
"length": 463.0,
"function_hash": "339016323334023720983324533148060132193"
},
"signature_version": "v1",
"target": {
"function": "esp6_output_tcp_encap",
"file": "net/ipv6/esp6.c"
},
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@9cbca30102028f9ad3d2098f935c4368f581fd07",
"signature_type": "Function"
},
{
"id": "CVE-2025-38097-36c8adb5",
"deprecated": false,
"digest": {
"length": 366.0,
"function_hash": "168040325944720706875342590799306287036"
},
"signature_version": "v1",
"target": {
"function": "esp_output_tcp_finish",
"file": "net/ipv6/esp6.c"
},
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@028363685bd0b7a19b4a820f82dd905b1dc83999",
"signature_type": "Function"
},
{
"id": "CVE-2025-38097-39edc942",
"deprecated": false,
"digest": {
"line_hashes": [
"89537660628805291498238600025795798410",
"185892256461689152953937009794708180834",
"235185014870353729202549403648778636479",
"130191928809935862769113665366401045267",
"23337921971899053205185189768866890890",
"291393644357677545835170758827062305359",
"298675279327290473547225934922951843016",
"19605870416286391522608568706455895773",
"7109568952732056965861186754863289971",
"49444465011371349724002584147957014398",
"134197900303377755641461364178735208302",
"53855817676510606626231608130142435859",
"217515246541844753853819615562531204924",
"312466529586848701030119930928573180262",
"237809572899647726328510764504930362247",
"64039464688885797413720994271300500691",
"100010497133045840425045516276857227045",
"4191770988960871061773204002263606297",
"41656139231711405080886265295796686632",
"106229200098143346820841927653404262573",
"215331047127320320970450263539722430130",
"208439493255604467980431385623728498506",
"18218207661583002249108569295911960324",
"145818056611830058819117975905838986774",
"165280635666507812352683759842092721484",
"113195526902603549523983360502247342672",
"116891655504435452526385725169315196526",
"224642701633854046640930175717036306873",
"171596880682222426440709531574099506864",
"33554020081685799833007922984559666801",
"69298025969947673467714316371222400593",
"138060716022176861838199177913514394228",
"69452122360052979352808853842484259954",
"223115543539235798609126600533425420239",
"15820116367251885444777597350211598433",
"234898992348583905833294873291838769124",
"238850217659025715959825509725813929983",
"274019159964408544200428438528674948350",
"260750309896504368161073275226275203461",
"199314019529690058400660816048475730216",
"202319708048082021257582482824122847634",
"39261381077719297864958195466805137033",
"12119073208115859331263549057797187300",
"50906735909646081858510324763421993047",
"266705342445824352467968718997295360715",
"295373569703810657541795708087745742285",
"321923836041983889092115029441823405589",
"88937689371389946449279362350519327067",
"275773687243243145337277916056452007753",
"296038352478108710908157945401942829096",
"229128718899410077197030359757904516454",
"115022493743764139952025173980846437833",
"60411187209689330148224072572422368084",
"224242140303452394082946213596352684282",
"240858200023277130021564565932593879119",
"119991450193512865536617372733569341636",
"251905078596276255956733021880875841847",
"282435092061407985844860022735897780860",
"179242025122788101216040429074831590877",
"35495620688865627480856866629367050906",
"302869928233523917727706318014027164740"
],
"threshold": 0.9
},
"signature_version": "v1",
"target": {
"file": "net/ipv6/esp6.c"
},
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@b58a295d10065960bcb9d60cb8ca6ead9837cd27",
"signature_type": "Line"
},
{
"id": "CVE-2025-38097-403edf93",
"deprecated": false,
"digest": {
"length": 164.0,
"function_hash": "52637798694664015223747066925280878777"
},
"signature_version": "v1",
"target": {
"function": "esp_free_tcp_sk",
"file": "net/ipv6/esp6.c"
},
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@74fd327767fb784c5875cf7c4ba1217f26020943",
"signature_type": "Function"
},
{
"id": "CVE-2025-38097-47915e9a",
"deprecated": false,
"digest": {
"length": 854.0,
"function_hash": "167433658527278429324941597733418249761"
},
"signature_version": "v1",
"target": {
"function": "__xfrm_state_delete",
"file": "net/xfrm/xfrm_state.c"
},
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@028363685bd0b7a19b4a820f82dd905b1dc83999",
"signature_type": "Function"
},
{
"id": "CVE-2025-38097-4d77e171",
"deprecated": false,
"digest": {
"line_hashes": [
"198783268553943067762308014929138932656",
"302144545038984735987151521544195301243",
"283648139359135396106092847178721657165",
"130191928809935862769113665366401045267",
"23337921971899053205185189768866890890",
"291393644357677545835170758827062305359",
"298675279327290473547225934922951843016",
"19605870416286391522608568706455895773",
"7109568952732056965861186754863289971",
"49444465011371349724002584147957014398",
"73586959640831494223732333784304018705",
"172637193178579346732365697327724591398",
"168145512525854708178039555593923291680",
"152913444319343725527278731415011656011",
"237809572899647726328510764504930362247",
"64039464688885797413720994271300500691",
"100010497133045840425045516276857227045",
"4191770988960871061773204002263606297",
"41656139231711405080886265295796686632",
"106229200098143346820841927653404262573",
"215331047127320320970450263539722430130",
"208439493255604467980431385623728498506",
"18218207661583002249108569295911960324",
"145818056611830058819117975905838986774",
"165280635666507812352683759842092721484",
"113195526902603549523983360502247342672",
"116891655504435452526385725169315196526",
"224642701633854046640930175717036306873",
"171596880682222426440709531574099506864",
"33554020081685799833007922984559666801",
"69298025969947673467714316371222400593",
"138060716022176861838199177913514394228",
"69452122360052979352808853842484259954",
"223115543539235798609126600533425420239",
"15820116367251885444777597350211598433",
"234898992348583905833294873291838769124",
"238850217659025715959825509725813929983",
"13086591632739374566467128075063513298",
"138240209179677553809059860177153012166",
"199314019529690058400660816048475730216",
"202319708048082021257582482824122847634",
"39261381077719297864958195466805137033",
"12119073208115859331263549057797187300",
"50906735909646081858510324763421993047",
"266705342445824352467968718997295360715",
"295373569703810657541795708087745742285",
"321923836041983889092115029441823405589",
"88937689371389946449279362350519327067",
"275773687243243145337277916056452007753",
"296038352478108710908157945401942829096",
"229128718899410077197030359757904516454",
"115022493743764139952025173980846437833",
"60411187209689330148224072572422368084",
"224242140303452394082946213596352684282",
"240858200023277130021564565932593879119",
"119991450193512865536617372733569341636",
"251905078596276255956733021880875841847",
"282435092061407985844860022735897780860",
"179242025122788101216040429074831590877",
"35495620688865627480856866629367050906",
"302869928233523917727706318014027164740"
],
"threshold": 0.9
},
"signature_version": "v1",
"target": {
"file": "net/ipv4/esp4.c"
},
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@b58a295d10065960bcb9d60cb8ca6ead9837cd27",
"signature_type": "Line"
},
{
"id": "CVE-2025-38097-4db43ef1",
"deprecated": false,
"digest": {
"line_hashes": [
"162230942657808169119467315452658171965",
"176168637973357644611469891244490587656",
"56504700947841867323752161432772145498",
"336189299989700529542870400860580164517",
"212382351627512216874602859198439438565"
],
"threshold": 0.9
},
"signature_version": "v1",
"target": {
"file": "net/xfrm/xfrm_state.c"
},
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@028363685bd0b7a19b4a820f82dd905b1dc83999",
"signature_type": "Line"
},
{
"id": "CVE-2025-38097-517916a2",
"deprecated": false,
"digest": {
"length": 164.0,
"function_hash": "52637798694664015223747066925280878777"
},
"signature_version": "v1",
"target": {
"function": "esp_free_tcp_sk",
"file": "net/ipv6/esp6.c"
},
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@9cbca30102028f9ad3d2098f935c4368f581fd07",
"signature_type": "Function"
},
{
"id": "CVE-2025-38097-56dcefc6",
"deprecated": false,
"digest": {
"line_hashes": [
"143439080148568127022018139973215565529",
"185892256461689152953937009794708180834",
"235185014870353729202549403648778636479",
"130191928809935862769113665366401045267",
"23337921971899053205185189768866890890",
"291393644357677545835170758827062305359",
"298675279327290473547225934922951843016",
"19605870416286391522608568706455895773",
"7109568952732056965861186754863289971",
"49444465011371349724002584147957014398",
"134197900303377755641461364178735208302",
"53855817676510606626231608130142435859",
"217515246541844753853819615562531204924",
"312466529586848701030119930928573180262",
"237809572899647726328510764504930362247",
"64039464688885797413720994271300500691",
"100010497133045840425045516276857227045",
"4191770988960871061773204002263606297",
"41656139231711405080886265295796686632",
"106229200098143346820841927653404262573",
"215331047127320320970450263539722430130",
"208439493255604467980431385623728498506",
"18218207661583002249108569295911960324",
"145818056611830058819117975905838986774",
"165280635666507812352683759842092721484",
"113195526902603549523983360502247342672",
"116891655504435452526385725169315196526",
"224642701633854046640930175717036306873",
"171596880682222426440709531574099506864",
"33554020081685799833007922984559666801",
"69298025969947673467714316371222400593",
"138060716022176861838199177913514394228",
"69452122360052979352808853842484259954",
"223115543539235798609126600533425420239",
"15820116367251885444777597350211598433",
"234898992348583905833294873291838769124",
"238850217659025715959825509725813929983",
"274019159964408544200428438528674948350",
"260750309896504368161073275226275203461",
"199314019529690058400660816048475730216",
"202319708048082021257582482824122847634",
"39261381077719297864958195466805137033",
"12119073208115859331263549057797187300",
"50906735909646081858510324763421993047",
"266705342445824352467968718997295360715",
"295373569703810657541795708087745742285",
"321923836041983889092115029441823405589",
"88937689371389946449279362350519327067",
"275773687243243145337277916056452007753",
"296038352478108710908157945401942829096",
"229128718899410077197030359757904516454",
"115022493743764139952025173980846437833",
"60411187209689330148224072572422368084",
"224242140303452394082946213596352684282",
"240858200023277130021564565932593879119",
"119991450193512865536617372733569341636",
"251905078596276255956733021880875841847",
"282435092061407985844860022735897780860",
"179242025122788101216040429074831590877",
"35495620688865627480856866629367050906",
"302869928233523917727706318014027164740"
],
"threshold": 0.9
},
"signature_version": "v1",
"target": {
"file": "net/ipv6/esp6.c"
},
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@74fd327767fb784c5875cf7c4ba1217f26020943",
"signature_type": "Line"
},
{
"id": "CVE-2025-38097-5c68ed03",
"deprecated": false,
"digest": {
"length": 463.0,
"function_hash": "339016323334023720983324533148060132193"
},
"signature_version": "v1",
"target": {
"function": "esp_output_tcp_encap",
"file": "net/ipv4/esp4.c"
},
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@74fd327767fb784c5875cf7c4ba1217f26020943",
"signature_type": "Function"
},
{
"id": "CVE-2025-38097-5ec8f621",
"deprecated": false,
"digest": {
"length": 1346.0,
"function_hash": "228667779304644839214846204178052589903"
},
"signature_version": "v1",
"target": {
"function": "esp_find_tcp_sk",
"file": "net/ipv4/esp4.c"
},
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@b58a295d10065960bcb9d60cb8ca6ead9837cd27",
"signature_type": "Function"
},
{
"id": "CVE-2025-38097-63f71e0d",
"deprecated": false,
"digest": {
"length": 1369.0,
"function_hash": "254420376061558758313935904993406280377"
},
"signature_version": "v1",
"target": {
"function": "esp6_find_tcp_sk",
"file": "net/ipv6/esp6.c"
},
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@b58a295d10065960bcb9d60cb8ca6ead9837cd27",
"signature_type": "Function"
},
{
"id": "CVE-2025-38097-6887cd68",
"deprecated": false,
"digest": {
"length": 164.0,
"function_hash": "52637798694664015223747066925280878777"
},
"signature_version": "v1",
"target": {
"function": "esp_free_tcp_sk",
"file": "net/ipv4/esp4.c"
},
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@e4cde54b46a87231c77256a633be1bef62687d69",
"signature_type": "Function"
},
{
"id": "CVE-2025-38097-6a4a598e",
"deprecated": false,
"digest": {
"length": 1346.0,
"function_hash": "228667779304644839214846204178052589903"
},
"signature_version": "v1",
"target": {
"function": "esp_find_tcp_sk",
"file": "net/ipv4/esp4.c"
},
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@74fd327767fb784c5875cf7c4ba1217f26020943",
"signature_type": "Function"
},
{
"id": "CVE-2025-38097-6f6f5385",
"deprecated": false,
"digest": {
"length": 1346.0,
"function_hash": "228667779304644839214846204178052589903"
},
"signature_version": "v1",
"target": {
"function": "esp_find_tcp_sk",
"file": "net/ipv4/esp4.c"
},
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@9cbca30102028f9ad3d2098f935c4368f581fd07",
"signature_type": "Function"
},
{
"id": "CVE-2025-38097-70d1793b",
"deprecated": false,
"digest": {
"line_hashes": [
"122376189121043076724022984415062113916",
"131299715966363984312278577469921204886",
"56504700947841867323752161432772145498",
"336189299989700529542870400860580164517",
"212382351627512216874602859198439438565"
],
"threshold": 0.9
},
"signature_version": "v1",
"target": {
"file": "net/xfrm/xfrm_state.c"
},
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@e4cde54b46a87231c77256a633be1bef62687d69",
"signature_type": "Line"
},
{
"id": "CVE-2025-38097-743ab39b",
"deprecated": false,
"digest": {
"length": 463.0,
"function_hash": "339016323334023720983324533148060132193"
},
"signature_version": "v1",
"target": {
"function": "esp_output_tcp_encap",
"file": "net/ipv4/esp4.c"
},
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@9cbca30102028f9ad3d2098f935c4368f581fd07",
"signature_type": "Function"
},
{
"id": "CVE-2025-38097-754dc78a",
"deprecated": false,
"digest": {
"length": 366.0,
"function_hash": "168040325944720706875342590799306287036"
},
"signature_version": "v1",
"target": {
"function": "esp_output_tcp_finish",
"file": "net/ipv4/esp4.c"
},
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@74fd327767fb784c5875cf7c4ba1217f26020943",
"signature_type": "Function"
},
{
"id": "CVE-2025-38097-76271aa8",
"deprecated": false,
"digest": {
"length": 1369.0,
"function_hash": "254420376061558758313935904993406280377"
},
"signature_version": "v1",
"target": {
"function": "esp6_find_tcp_sk",
"file": "net/ipv6/esp6.c"
},
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@74fd327767fb784c5875cf7c4ba1217f26020943",
"signature_type": "Function"
},
{
"id": "CVE-2025-38097-7c8108a7",
"deprecated": false,
"digest": {
"line_hashes": [
"192987496791001094848591497849647391148",
"302144545038984735987151521544195301243",
"283648139359135396106092847178721657165",
"130191928809935862769113665366401045267",
"23337921971899053205185189768866890890",
"291393644357677545835170758827062305359",
"298675279327290473547225934922951843016",
"19605870416286391522608568706455895773",
"7109568952732056965861186754863289971",
"49444465011371349724002584147957014398",
"73586959640831494223732333784304018705",
"172637193178579346732365697327724591398",
"168145512525854708178039555593923291680",
"152913444319343725527278731415011656011",
"237809572899647726328510764504930362247",
"64039464688885797413720994271300500691",
"100010497133045840425045516276857227045",
"4191770988960871061773204002263606297",
"41656139231711405080886265295796686632",
"106229200098143346820841927653404262573",
"215331047127320320970450263539722430130",
"208439493255604467980431385623728498506",
"18218207661583002249108569295911960324",
"145818056611830058819117975905838986774",
"165280635666507812352683759842092721484",
"113195526902603549523983360502247342672",
"116891655504435452526385725169315196526",
"224642701633854046640930175717036306873",
"171596880682222426440709531574099506864",
"33554020081685799833007922984559666801",
"69298025969947673467714316371222400593",
"138060716022176861838199177913514394228",
"69452122360052979352808853842484259954",
"223115543539235798609126600533425420239",
"15820116367251885444777597350211598433",
"234898992348583905833294873291838769124",
"238850217659025715959825509725813929983",
"13086591632739374566467128075063513298",
"138240209179677553809059860177153012166",
"199314019529690058400660816048475730216",
"202319708048082021257582482824122847634",
"39261381077719297864958195466805137033",
"12119073208115859331263549057797187300",
"50906735909646081858510324763421993047",
"266705342445824352467968718997295360715",
"295373569703810657541795708087745742285",
"321923836041983889092115029441823405589",
"88937689371389946449279362350519327067",
"275773687243243145337277916056452007753",
"296038352478108710908157945401942829096",
"229128718899410077197030359757904516454",
"115022493743764139952025173980846437833",
"60411187209689330148224072572422368084",
"224242140303452394082946213596352684282",
"240858200023277130021564565932593879119",
"119991450193512865536617372733569341636",
"251905078596276255956733021880875841847",
"282435092061407985844860022735897780860",
"179242025122788101216040429074831590877",
"35495620688865627480856866629367050906",
"302869928233523917727706318014027164740"
],
"threshold": 0.9
},
"signature_version": "v1",
"target": {
"file": "net/ipv4/esp4.c"
},
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@9cbca30102028f9ad3d2098f935c4368f581fd07",
"signature_type": "Line"
},
{
"id": "CVE-2025-38097-81c4c539",
"deprecated": false,
"digest": {
"length": 164.0,
"function_hash": "52637798694664015223747066925280878777"
},
"signature_version": "v1",
"target": {
"function": "esp_free_tcp_sk",
"file": "net/ipv4/esp4.c"
},
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@028363685bd0b7a19b4a820f82dd905b1dc83999",
"signature_type": "Function"
},
{
"id": "CVE-2025-38097-8ebba648",
"deprecated": false,
"digest": {
"length": 164.0,
"function_hash": "52637798694664015223747066925280878777"
},
"signature_version": "v1",
"target": {
"function": "esp_free_tcp_sk",
"file": "net/ipv4/esp4.c"
},
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@b58a295d10065960bcb9d60cb8ca6ead9837cd27",
"signature_type": "Function"
},
{
"id": "CVE-2025-38097-8f27fada",
"deprecated": false,
"digest": {
"line_hashes": [
"99775104756857171574761361895695484291",
"94569012879480310873314513946473572180",
"58279449761786682806623431487811025411",
"304544638459518325458551622269924812662"
],
"threshold": 0.9
},
"signature_version": "v1",
"target": {
"file": "include/net/xfrm.h"
},
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@028363685bd0b7a19b4a820f82dd905b1dc83999",
"signature_type": "Line"
},
{
"id": "CVE-2025-38097-908369ca",
"deprecated": false,
"digest": {
"length": 1346.0,
"function_hash": "228667779304644839214846204178052589903"
},
"signature_version": "v1",
"target": {
"function": "esp_find_tcp_sk",
"file": "net/ipv4/esp4.c"
},
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@e4cde54b46a87231c77256a633be1bef62687d69",
"signature_type": "Function"
},
{
"id": "CVE-2025-38097-9c5cbcf4",
"deprecated": false,
"digest": {
"line_hashes": [
"192987496791001094848591497849647391148",
"302144545038984735987151521544195301243",
"283648139359135396106092847178721657165",
"130191928809935862769113665366401045267",
"23337921971899053205185189768866890890",
"291393644357677545835170758827062305359",
"298675279327290473547225934922951843016",
"19605870416286391522608568706455895773",
"7109568952732056965861186754863289971",
"49444465011371349724002584147957014398",
"73586959640831494223732333784304018705",
"172637193178579346732365697327724591398",
"168145512525854708178039555593923291680",
"152913444319343725527278731415011656011",
"237809572899647726328510764504930362247",
"64039464688885797413720994271300500691",
"100010497133045840425045516276857227045",
"4191770988960871061773204002263606297",
"41656139231711405080886265295796686632",
"106229200098143346820841927653404262573",
"215331047127320320970450263539722430130",
"208439493255604467980431385623728498506",
"18218207661583002249108569295911960324",
"145818056611830058819117975905838986774",
"165280635666507812352683759842092721484",
"113195526902603549523983360502247342672",
"116891655504435452526385725169315196526",
"224642701633854046640930175717036306873",
"171596880682222426440709531574099506864",
"33554020081685799833007922984559666801",
"69298025969947673467714316371222400593",
"138060716022176861838199177913514394228",
"69452122360052979352808853842484259954",
"223115543539235798609126600533425420239",
"15820116367251885444777597350211598433",
"234898992348583905833294873291838769124",
"238850217659025715959825509725813929983",
"13086591632739374566467128075063513298",
"138240209179677553809059860177153012166",
"199314019529690058400660816048475730216",
"202319708048082021257582482824122847634",
"39261381077719297864958195466805137033",
"12119073208115859331263549057797187300",
"50906735909646081858510324763421993047",
"266705342445824352467968718997295360715",
"295373569703810657541795708087745742285",
"321923836041983889092115029441823405589",
"88937689371389946449279362350519327067",
"275773687243243145337277916056452007753",
"296038352478108710908157945401942829096",
"229128718899410077197030359757904516454",
"115022493743764139952025173980846437833",
"60411187209689330148224072572422368084",
"224242140303452394082946213596352684282",
"240858200023277130021564565932593879119",
"119991450193512865536617372733569341636",
"251905078596276255956733021880875841847",
"282435092061407985844860022735897780860",
"179242025122788101216040429074831590877",
"35495620688865627480856866629367050906",
"302869928233523917727706318014027164740"
],
"threshold": 0.9
},
"signature_version": "v1",
"target": {
"file": "net/ipv4/esp4.c"
},
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@028363685bd0b7a19b4a820f82dd905b1dc83999",
"signature_type": "Line"
},
{
"id": "CVE-2025-38097-9d97f0ad",
"deprecated": false,
"digest": {
"length": 164.0,
"function_hash": "52637798694664015223747066925280878777"
},
"signature_version": "v1",
"target": {
"function": "esp_free_tcp_sk",
"file": "net/ipv4/esp4.c"
},
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@9cbca30102028f9ad3d2098f935c4368f581fd07",
"signature_type": "Function"
},
{
"id": "CVE-2025-38097-a23681c5",
"deprecated": false,
"digest": {
"length": 463.0,
"function_hash": "339016323334023720983324533148060132193"
},
"signature_version": "v1",
"target": {
"function": "esp6_output_tcp_encap",
"file": "net/ipv6/esp6.c"
},
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@e4cde54b46a87231c77256a633be1bef62687d69",
"signature_type": "Function"
},
{
"id": "CVE-2025-38097-a2a118d8",
"deprecated": false,
"digest": {
"length": 164.0,
"function_hash": "52637798694664015223747066925280878777"
},
"signature_version": "v1",
"target": {
"function": "esp_free_tcp_sk",
"file": "net/ipv4/esp4.c"
},
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@74fd327767fb784c5875cf7c4ba1217f26020943",
"signature_type": "Function"
},
{
"id": "CVE-2025-38097-a3030189",
"deprecated": false,
"digest": {
"length": 366.0,
"function_hash": "168040325944720706875342590799306287036"
},
"signature_version": "v1",
"target": {
"function": "esp_output_tcp_finish",
"file": "net/ipv6/esp6.c"
},
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@9cbca30102028f9ad3d2098f935c4368f581fd07",
"signature_type": "Function"
},
{
"id": "CVE-2025-38097-a60ce757",
"deprecated": false,
"digest": {
"length": 463.0,
"function_hash": "339016323334023720983324533148060132193"
},
"signature_version": "v1",
"target": {
"function": "esp_output_tcp_encap",
"file": "net/ipv4/esp4.c"
},
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@e4cde54b46a87231c77256a633be1bef62687d69",
"signature_type": "Function"
},
{
"id": "CVE-2025-38097-a6df3594",
"deprecated": false,
"digest": {
"length": 1369.0,
"function_hash": "254420376061558758313935904993406280377"
},
"signature_version": "v1",
"target": {
"function": "esp6_find_tcp_sk",
"file": "net/ipv6/esp6.c"
},
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@9cbca30102028f9ad3d2098f935c4368f581fd07",
"signature_type": "Function"
},
{
"id": "CVE-2025-38097-aaf8e6e0",
"deprecated": false,
"digest": {
"length": 463.0,
"function_hash": "339016323334023720983324533148060132193"
},
"signature_version": "v1",
"target": {
"function": "esp_output_tcp_encap",
"file": "net/ipv4/esp4.c"
},
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@b58a295d10065960bcb9d60cb8ca6ead9837cd27",
"signature_type": "Function"
},
{
"id": "CVE-2025-38097-acf77a1d",
"deprecated": false,
"digest": {
"line_hashes": [
"143439080148568127022018139973215565529",
"185892256461689152953937009794708180834",
"235185014870353729202549403648778636479",
"130191928809935862769113665366401045267",
"23337921971899053205185189768866890890",
"291393644357677545835170758827062305359",
"298675279327290473547225934922951843016",
"19605870416286391522608568706455895773",
"7109568952732056965861186754863289971",
"49444465011371349724002584147957014398",
"134197900303377755641461364178735208302",
"53855817676510606626231608130142435859",
"217515246541844753853819615562531204924",
"312466529586848701030119930928573180262",
"237809572899647726328510764504930362247",
"64039464688885797413720994271300500691",
"100010497133045840425045516276857227045",
"4191770988960871061773204002263606297",
"41656139231711405080886265295796686632",
"106229200098143346820841927653404262573",
"215331047127320320970450263539722430130",
"208439493255604467980431385623728498506",
"18218207661583002249108569295911960324",
"145818056611830058819117975905838986774",
"165280635666507812352683759842092721484",
"113195526902603549523983360502247342672",
"116891655504435452526385725169315196526",
"224642701633854046640930175717036306873",
"171596880682222426440709531574099506864",
"33554020081685799833007922984559666801",
"69298025969947673467714316371222400593",
"138060716022176861838199177913514394228",
"69452122360052979352808853842484259954",
"223115543539235798609126600533425420239",
"15820116367251885444777597350211598433",
"234898992348583905833294873291838769124",
"238850217659025715959825509725813929983",
"274019159964408544200428438528674948350",
"260750309896504368161073275226275203461",
"199314019529690058400660816048475730216",
"202319708048082021257582482824122847634",
"39261381077719297864958195466805137033",
"12119073208115859331263549057797187300",
"50906735909646081858510324763421993047",
"266705342445824352467968718997295360715",
"295373569703810657541795708087745742285",
"321923836041983889092115029441823405589",
"88937689371389946449279362350519327067",
"275773687243243145337277916056452007753",
"296038352478108710908157945401942829096",
"229128718899410077197030359757904516454",
"115022493743764139952025173980846437833",
"60411187209689330148224072572422368084",
"224242140303452394082946213596352684282",
"240858200023277130021564565932593879119",
"119991450193512865536617372733569341636",
"251905078596276255956733021880875841847",
"282435092061407985844860022735897780860",
"179242025122788101216040429074831590877",
"35495620688865627480856866629367050906",
"302869928233523917727706318014027164740"
],
"threshold": 0.9
},
"signature_version": "v1",
"target": {
"file": "net/ipv6/esp6.c"
},
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@9cbca30102028f9ad3d2098f935c4368f581fd07",
"signature_type": "Line"
},
{
"id": "CVE-2025-38097-af6a4467",
"deprecated": false,
"digest": {
"length": 164.0,
"function_hash": "52637798694664015223747066925280878777"
},
"signature_version": "v1",
"target": {
"function": "esp_free_tcp_sk",
"file": "net/ipv6/esp6.c"
},
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@b58a295d10065960bcb9d60cb8ca6ead9837cd27",
"signature_type": "Function"
},
{
"id": "CVE-2025-38097-bce4a188",
"deprecated": false,
"digest": {
"length": 341.0,
"function_hash": "103811662120127062348343333070462933278"
},
"signature_version": "v1",
"target": {
"function": "esp_output_tcp_finish",
"file": "net/ipv6/esp6.c"
},
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@b58a295d10065960bcb9d60cb8ca6ead9837cd27",
"signature_type": "Function"
},
{
"id": "CVE-2025-38097-cbe330e3",
"deprecated": false,
"digest": {
"line_hashes": [
"28778533059872847144469451203821640695",
"302144545038984735987151521544195301243",
"283648139359135396106092847178721657165",
"130191928809935862769113665366401045267",
"23337921971899053205185189768866890890",
"291393644357677545835170758827062305359",
"298675279327290473547225934922951843016",
"19605870416286391522608568706455895773",
"7109568952732056965861186754863289971",
"49444465011371349724002584147957014398",
"73586959640831494223732333784304018705",
"172637193178579346732365697327724591398",
"168145512525854708178039555593923291680",
"152913444319343725527278731415011656011",
"237809572899647726328510764504930362247",
"64039464688885797413720994271300500691",
"100010497133045840425045516276857227045",
"4191770988960871061773204002263606297",
"41656139231711405080886265295796686632",
"106229200098143346820841927653404262573",
"215331047127320320970450263539722430130",
"208439493255604467980431385623728498506",
"18218207661583002249108569295911960324",
"145818056611830058819117975905838986774",
"165280635666507812352683759842092721484",
"113195526902603549523983360502247342672",
"116891655504435452526385725169315196526",
"224642701633854046640930175717036306873",
"171596880682222426440709531574099506864",
"33554020081685799833007922984559666801",
"69298025969947673467714316371222400593",
"138060716022176861838199177913514394228",
"69452122360052979352808853842484259954",
"223115543539235798609126600533425420239",
"15820116367251885444777597350211598433",
"234898992348583905833294873291838769124",
"238850217659025715959825509725813929983",
"13086591632739374566467128075063513298",
"138240209179677553809059860177153012166",
"199314019529690058400660816048475730216",
"202319708048082021257582482824122847634",
"39261381077719297864958195466805137033",
"12119073208115859331263549057797187300",
"50906735909646081858510324763421993047",
"266705342445824352467968718997295360715",
"295373569703810657541795708087745742285",
"321923836041983889092115029441823405589",
"88937689371389946449279362350519327067",
"275773687243243145337277916056452007753",
"296038352478108710908157945401942829096",
"229128718899410077197030359757904516454",
"115022493743764139952025173980846437833",
"60411187209689330148224072572422368084",
"224242140303452394082946213596352684282",
"240858200023277130021564565932593879119",
"119991450193512865536617372733569341636",
"251905078596276255956733021880875841847",
"282435092061407985844860022735897780860",
"179242025122788101216040429074831590877",
"35495620688865627480856866629367050906",
"302869928233523917727706318014027164740"
],
"threshold": 0.9
},
"signature_version": "v1",
"target": {
"file": "net/ipv4/esp4.c"
},
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@e4cde54b46a87231c77256a633be1bef62687d69",
"signature_type": "Line"
},
{
"id": "CVE-2025-38097-cdd87178",
"deprecated": false,
"digest": {
"length": 341.0,
"function_hash": "103811662120127062348343333070462933278"
},
"signature_version": "v1",
"target": {
"function": "esp_output_tcp_finish",
"file": "net/ipv4/esp4.c"
},
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@b58a295d10065960bcb9d60cb8ca6ead9837cd27",
"signature_type": "Function"
},
{
"id": "CVE-2025-38097-d4d9f0c3",
"deprecated": false,
"digest": {
"line_hashes": [
"108256990008591336964182748424493071812",
"185892256461689152953937009794708180834",
"235185014870353729202549403648778636479",
"130191928809935862769113665366401045267",
"23337921971899053205185189768866890890",
"291393644357677545835170758827062305359",
"298675279327290473547225934922951843016",
"19605870416286391522608568706455895773",
"7109568952732056965861186754863289971",
"49444465011371349724002584147957014398",
"134197900303377755641461364178735208302",
"53855817676510606626231608130142435859",
"217515246541844753853819615562531204924",
"312466529586848701030119930928573180262",
"237809572899647726328510764504930362247",
"64039464688885797413720994271300500691",
"100010497133045840425045516276857227045",
"4191770988960871061773204002263606297",
"41656139231711405080886265295796686632",
"106229200098143346820841927653404262573",
"215331047127320320970450263539722430130",
"208439493255604467980431385623728498506",
"18218207661583002249108569295911960324",
"145818056611830058819117975905838986774",
"165280635666507812352683759842092721484",
"113195526902603549523983360502247342672",
"116891655504435452526385725169315196526",
"224642701633854046640930175717036306873",
"171596880682222426440709531574099506864",
"33554020081685799833007922984559666801",
"69298025969947673467714316371222400593",
"138060716022176861838199177913514394228",
"69452122360052979352808853842484259954",
"223115543539235798609126600533425420239",
"15820116367251885444777597350211598433",
"234898992348583905833294873291838769124",
"238850217659025715959825509725813929983",
"274019159964408544200428438528674948350",
"260750309896504368161073275226275203461",
"199314019529690058400660816048475730216",
"202319708048082021257582482824122847634",
"39261381077719297864958195466805137033",
"12119073208115859331263549057797187300",
"50906735909646081858510324763421993047",
"266705342445824352467968718997295360715",
"295373569703810657541795708087745742285",
"321923836041983889092115029441823405589",
"88937689371389946449279362350519327067",
"275773687243243145337277916056452007753",
"296038352478108710908157945401942829096",
"229128718899410077197030359757904516454",
"115022493743764139952025173980846437833",
"60411187209689330148224072572422368084",
"224242140303452394082946213596352684282",
"240858200023277130021564565932593879119",
"119991450193512865536617372733569341636",
"251905078596276255956733021880875841847",
"282435092061407985844860022735897780860",
"179242025122788101216040429074831590877",
"35495620688865627480856866629367050906",
"302869928233523917727706318014027164740"
],
"threshold": 0.9
},
"signature_version": "v1",
"target": {
"file": "net/ipv6/esp6.c"
},
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@e4cde54b46a87231c77256a633be1bef62687d69",
"signature_type": "Line"
},
{
"id": "CVE-2025-38097-d6e9af25",
"deprecated": false,
"digest": {
"line_hashes": [
"99775104756857171574761361895695484291",
"94569012879480310873314513946473572180",
"58279449761786682806623431487811025411",
"304544638459518325458551622269924812662"
],
"threshold": 0.9
},
"signature_version": "v1",
"target": {
"file": "include/net/xfrm.h"
},
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@9cbca30102028f9ad3d2098f935c4368f581fd07",
"signature_type": "Line"
},
{
"id": "CVE-2025-38097-d87dbfc9",
"deprecated": false,
"digest": {
"length": 1369.0,
"function_hash": "254420376061558758313935904993406280377"
},
"signature_version": "v1",
"target": {
"function": "esp6_find_tcp_sk",
"file": "net/ipv6/esp6.c"
},
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@e4cde54b46a87231c77256a633be1bef62687d69",
"signature_type": "Function"
},
{
"id": "CVE-2025-38097-d924215f",
"deprecated": false,
"digest": {
"length": 854.0,
"function_hash": "167433658527278429324941597733418249761"
},
"signature_version": "v1",
"target": {
"function": "__xfrm_state_delete",
"file": "net/xfrm/xfrm_state.c"
},
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@9cbca30102028f9ad3d2098f935c4368f581fd07",
"signature_type": "Function"
},
{
"id": "CVE-2025-38097-dd7ecf51",
"deprecated": false,
"digest": {
"line_hashes": [
"162230942657808169119467315452658171965",
"176168637973357644611469891244490587656",
"56504700947841867323752161432772145498",
"336189299989700529542870400860580164517",
"212382351627512216874602859198439438565"
],
"threshold": 0.9
},
"signature_version": "v1",
"target": {
"file": "net/xfrm/xfrm_state.c"
},
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@74fd327767fb784c5875cf7c4ba1217f26020943",
"signature_type": "Line"
},
{
"id": "CVE-2025-38097-e175f71b",
"deprecated": false,
"digest": {
"length": 341.0,
"function_hash": "103811662120127062348343333070462933278"
},
"signature_version": "v1",
"target": {
"function": "esp_output_tcp_finish",
"file": "net/ipv6/esp6.c"
},
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@e4cde54b46a87231c77256a633be1bef62687d69",
"signature_type": "Function"
},
{
"id": "CVE-2025-38097-e5fc8801",
"deprecated": false,
"digest": {
"length": 164.0,
"function_hash": "52637798694664015223747066925280878777"
},
"signature_version": "v1",
"target": {
"function": "esp_free_tcp_sk",
"file": "net/ipv6/esp6.c"
},
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@028363685bd0b7a19b4a820f82dd905b1dc83999",
"signature_type": "Function"
},
{
"id": "CVE-2025-38097-f336cbf8",
"deprecated": false,
"digest": {
"line_hashes": [
"99775104756857171574761361895695484291",
"71218520079162882183916744000753604268",
"180426684366618156943476940603922068188",
"304264949770242372394690470764390000751"
],
"threshold": 0.9
},
"signature_version": "v1",
"target": {
"file": "include/net/xfrm.h"
},
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@e4cde54b46a87231c77256a633be1bef62687d69",
"signature_type": "Line"
},
{
"id": "CVE-2025-38097-f4e173cb",
"deprecated": false,
"digest": {
"length": 366.0,
"function_hash": "168040325944720706875342590799306287036"
},
"signature_version": "v1",
"target": {
"function": "esp_output_tcp_finish",
"file": "net/ipv4/esp4.c"
},
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@028363685bd0b7a19b4a820f82dd905b1dc83999",
"signature_type": "Function"
},
{
"id": "CVE-2025-38097-f9fc660d",
"deprecated": false,
"digest": {
"length": 1346.0,
"function_hash": "228667779304644839214846204178052589903"
},
"signature_version": "v1",
"target": {
"function": "esp_find_tcp_sk",
"file": "net/ipv4/esp4.c"
},
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@028363685bd0b7a19b4a820f82dd905b1dc83999",
"signature_type": "Function"
},
{
"id": "CVE-2025-38097-fccfaa6f",
"deprecated": false,
"digest": {
"length": 854.0,
"function_hash": "167433658527278429324941597733418249761"
},
"signature_version": "v1",
"target": {
"function": "__xfrm_state_delete",
"file": "net/xfrm/xfrm_state.c"
},
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@74fd327767fb784c5875cf7c4ba1217f26020943",
"signature_type": "Function"
}
]