CVE-2025-38057

See a problem?
Please try reporting it to the source first.
Source
https://nvd.nist.gov/vuln/detail/CVE-2025-38057
Import Source
https://storage.googleapis.com/osv-test-cve-osv-conversion/osv-output/CVE-2025-38057.json
JSON Data
https://api.test.osv.dev/v1/vulns/CVE-2025-38057
Downstream
Related
Published
2025-06-18T09:33:37Z
Modified
2025-10-18T02:04:25.321741Z
Summary
espintcp: fix skb leaks
Details

In the Linux kernel, the following vulnerability has been resolved:

espintcp: fix skb leaks

A few error paths are missing a kfree_skb.

References

Affected packages

Git / git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git

Affected ranges

Type
GIT
Repo
https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git
Events
Introduced
e27cca96cd68fa2c6814c90f9a1cfd36bb68c593
Fixed
28756f22de48d25256ed89234b66b9037a3f0157
Type
GIT
Repo
https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git
Events
Introduced
e27cca96cd68fa2c6814c90f9a1cfd36bb68c593
Fixed
eb058693dfc93ed7a9c365adb899fedd648b9d9f
Type
GIT
Repo
https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git
Events
Introduced
e27cca96cd68fa2c6814c90f9a1cfd36bb68c593
Fixed
63c1f19a3be3169e51a5812d22a6d0c879414076

Affected versions

v5.*

v5.10
v5.10-rc1
v5.10-rc2
v5.10-rc3
v5.10-rc4
v5.10-rc5
v5.10-rc6
v5.10-rc7
v5.11
v5.11-rc1
v5.11-rc2
v5.11-rc3
v5.11-rc4
v5.11-rc5
v5.11-rc6
v5.11-rc7
v5.12
v5.12-rc1
v5.12-rc1-dontuse
v5.12-rc2
v5.12-rc3
v5.12-rc4
v5.12-rc5
v5.12-rc6
v5.12-rc7
v5.12-rc8
v5.13
v5.13-rc1
v5.13-rc2
v5.13-rc3
v5.13-rc4
v5.13-rc5
v5.13-rc6
v5.13-rc7
v5.14
v5.14-rc1
v5.14-rc2
v5.14-rc3
v5.14-rc4
v5.14-rc5
v5.14-rc6
v5.14-rc7
v5.15
v5.15-rc1
v5.15-rc2
v5.15-rc3
v5.15-rc4
v5.15-rc5
v5.15-rc6
v5.15-rc7
v5.16
v5.16-rc1
v5.16-rc2
v5.16-rc3
v5.16-rc4
v5.16-rc5
v5.16-rc6
v5.16-rc7
v5.16-rc8
v5.17
v5.17-rc1
v5.17-rc2
v5.17-rc3
v5.17-rc4
v5.17-rc5
v5.17-rc6
v5.17-rc7
v5.17-rc8
v5.18
v5.18-rc1
v5.18-rc2
v5.18-rc3
v5.18-rc4
v5.18-rc5
v5.18-rc6
v5.18-rc7
v5.19
v5.19-rc1
v5.19-rc2
v5.19-rc3
v5.19-rc4
v5.19-rc5
v5.19-rc6
v5.19-rc7
v5.19-rc8
v5.5
v5.5-rc2
v5.5-rc3
v5.5-rc4
v5.5-rc5
v5.5-rc6
v5.5-rc7
v5.6
v5.6-rc1
v5.6-rc2
v5.6-rc3
v5.6-rc4
v5.6-rc5
v5.6-rc6
v5.6-rc7
v5.7
v5.7-rc1
v5.7-rc2
v5.7-rc3
v5.7-rc4
v5.7-rc5
v5.7-rc6
v5.7-rc7
v5.8
v5.8-rc1
v5.8-rc2
v5.8-rc3
v5.8-rc4
v5.8-rc5
v5.8-rc6
v5.8-rc7
v5.9
v5.9-rc1
v5.9-rc2
v5.9-rc3
v5.9-rc4
v5.9-rc5
v5.9-rc6
v5.9-rc7
v5.9-rc8

v6.*

v6.0
v6.0-rc1
v6.0-rc2
v6.0-rc3
v6.0-rc4
v6.0-rc5
v6.0-rc6
v6.0-rc7
v6.1
v6.1-rc1
v6.1-rc2
v6.1-rc3
v6.1-rc4
v6.1-rc5
v6.1-rc6
v6.1-rc7
v6.1-rc8
v6.10
v6.10-rc1
v6.10-rc2
v6.10-rc3
v6.10-rc4
v6.10-rc5
v6.10-rc6
v6.10-rc7
v6.11
v6.11-rc1
v6.11-rc2
v6.11-rc3
v6.11-rc4
v6.11-rc5
v6.11-rc6
v6.11-rc7
v6.12
v6.12-rc1
v6.12-rc2
v6.12-rc3
v6.12-rc4
v6.12-rc5
v6.12-rc6
v6.12-rc7
v6.12.1
v6.12.10
v6.12.11
v6.12.12
v6.12.13
v6.12.14
v6.12.15
v6.12.16
v6.12.17
v6.12.18
v6.12.19
v6.12.2
v6.12.20
v6.12.21
v6.12.22
v6.12.23
v6.12.24
v6.12.25
v6.12.26
v6.12.27
v6.12.28
v6.12.29
v6.12.3
v6.12.30
v6.12.4
v6.12.5
v6.12.6
v6.12.7
v6.12.8
v6.12.9
v6.13
v6.13-rc1
v6.13-rc2
v6.13-rc3
v6.13-rc4
v6.13-rc5
v6.13-rc6
v6.13-rc7
v6.14
v6.14-rc1
v6.14-rc2
v6.14-rc3
v6.14-rc4
v6.14-rc5
v6.14-rc6
v6.14-rc7
v6.14.1
v6.14.2
v6.14.3
v6.14.4
v6.14.5
v6.14.6
v6.14.7
v6.14.8
v6.15-rc1
v6.2
v6.2-rc1
v6.2-rc2
v6.2-rc3
v6.2-rc4
v6.2-rc5
v6.2-rc6
v6.2-rc7
v6.2-rc8
v6.3
v6.3-rc1
v6.3-rc2
v6.3-rc3
v6.3-rc4
v6.3-rc5
v6.3-rc6
v6.3-rc7
v6.4
v6.4-rc1
v6.4-rc2
v6.4-rc3
v6.4-rc4
v6.4-rc5
v6.4-rc6
v6.4-rc7
v6.5
v6.5-rc1
v6.5-rc2
v6.5-rc3
v6.5-rc4
v6.5-rc5
v6.5-rc6
v6.5-rc7
v6.6
v6.6-rc1
v6.6-rc2
v6.6-rc3
v6.6-rc4
v6.6-rc5
v6.6-rc6
v6.6-rc7
v6.7
v6.7-rc1
v6.7-rc2
v6.7-rc3
v6.7-rc4
v6.7-rc5
v6.7-rc6
v6.7-rc7
v6.7-rc8
v6.8
v6.8-rc1
v6.8-rc2
v6.8-rc3
v6.8-rc4
v6.8-rc5
v6.8-rc6
v6.8-rc7
v6.9
v6.9-rc1
v6.9-rc2
v6.9-rc3
v6.9-rc4
v6.9-rc5
v6.9-rc6
v6.9-rc7

Database specific

vanir_signatures

[
    {
        "id": "CVE-2025-38057-1844e208",
        "signature_type": "Function",
        "source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@63c1f19a3be3169e51a5812d22a6d0c879414076",
        "target": {
            "file": "net/xfrm/espintcp.c",
            "function": "espintcp_queue_out"
        },
        "deprecated": false,
        "signature_version": "v1",
        "digest": {
            "length": 240.0,
            "function_hash": "177006546006789156379969961655861575800"
        }
    },
    {
        "id": "CVE-2025-38057-270f341e",
        "signature_type": "Line",
        "source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@eb058693dfc93ed7a9c365adb899fedd648b9d9f",
        "target": {
            "file": "net/xfrm/espintcp.c"
        },
        "deprecated": false,
        "signature_version": "v1",
        "digest": {
            "line_hashes": [
                "317244675499272915439138935153638191403",
                "11399526634604841781618104011468593256",
                "18381763933325530528564698159630231527",
                "223849348140129745141022621326663741370",
                "123670545642943573106952686159140827741"
            ],
            "threshold": 0.9
        }
    },
    {
        "id": "CVE-2025-38057-2781f215",
        "signature_type": "Function",
        "source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@28756f22de48d25256ed89234b66b9037a3f0157",
        "target": {
            "file": "net/xfrm/espintcp.c",
            "function": "espintcp_queue_out"
        },
        "deprecated": false,
        "signature_version": "v1",
        "digest": {
            "length": 240.0,
            "function_hash": "177006546006789156379969961655861575800"
        }
    },
    {
        "id": "CVE-2025-38057-393c3e74",
        "signature_type": "Line",
        "source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@63c1f19a3be3169e51a5812d22a6d0c879414076",
        "target": {
            "file": "net/ipv4/esp4.c"
        },
        "deprecated": false,
        "signature_version": "v1",
        "digest": {
            "line_hashes": [
                "125800312794632689940270636345613537575",
                "52522577446151700897408279904044363767",
                "278157151534944029501973209530438951801",
                "125087642642230456057054545408617556237",
                "293254119149149970074394387529363164554"
            ],
            "threshold": 0.9
        }
    },
    {
        "id": "CVE-2025-38057-4c098fc4",
        "signature_type": "Line",
        "source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@63c1f19a3be3169e51a5812d22a6d0c879414076",
        "target": {
            "file": "net/xfrm/espintcp.c"
        },
        "deprecated": false,
        "signature_version": "v1",
        "digest": {
            "line_hashes": [
                "317244675499272915439138935153638191403",
                "11399526634604841781618104011468593256",
                "18381763933325530528564698159630231527",
                "223849348140129745141022621326663741370",
                "123670545642943573106952686159140827741"
            ],
            "threshold": 0.9
        }
    },
    {
        "id": "CVE-2025-38057-4cae15a6",
        "signature_type": "Function",
        "source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@63c1f19a3be3169e51a5812d22a6d0c879414076",
        "target": {
            "file": "net/ipv6/esp6.c",
            "function": "esp_output_tcp_finish"
        },
        "deprecated": false,
        "signature_version": "v1",
        "digest": {
            "length": 341.0,
            "function_hash": "103811662120127062348343333070462933278"
        }
    },
    {
        "id": "CVE-2025-38057-5d469693",
        "signature_type": "Function",
        "source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@eb058693dfc93ed7a9c365adb899fedd648b9d9f",
        "target": {
            "file": "net/ipv6/esp6.c",
            "function": "esp_output_tcp_finish"
        },
        "deprecated": false,
        "signature_version": "v1",
        "digest": {
            "length": 341.0,
            "function_hash": "103811662120127062348343333070462933278"
        }
    },
    {
        "id": "CVE-2025-38057-67120b16",
        "signature_type": "Line",
        "source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@eb058693dfc93ed7a9c365adb899fedd648b9d9f",
        "target": {
            "file": "net/ipv4/esp4.c"
        },
        "deprecated": false,
        "signature_version": "v1",
        "digest": {
            "line_hashes": [
                "125800312794632689940270636345613537575",
                "52522577446151700897408279904044363767",
                "278157151534944029501973209530438951801",
                "125087642642230456057054545408617556237",
                "293254119149149970074394387529363164554"
            ],
            "threshold": 0.9
        }
    },
    {
        "id": "CVE-2025-38057-68115110",
        "signature_type": "Function",
        "source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@28756f22de48d25256ed89234b66b9037a3f0157",
        "target": {
            "file": "net/ipv4/esp4.c",
            "function": "esp_output_tcp_finish"
        },
        "deprecated": false,
        "signature_version": "v1",
        "digest": {
            "length": 341.0,
            "function_hash": "103811662120127062348343333070462933278"
        }
    },
    {
        "id": "CVE-2025-38057-75a80ecc",
        "signature_type": "Line",
        "source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@63c1f19a3be3169e51a5812d22a6d0c879414076",
        "target": {
            "file": "net/ipv6/esp6.c"
        },
        "deprecated": false,
        "signature_version": "v1",
        "digest": {
            "line_hashes": [
                "44641761696476191129002800552643641322",
                "205252438199644145343705475118968818939",
                "278157151534944029501973209530438951801",
                "125087642642230456057054545408617556237",
                "293254119149149970074394387529363164554"
            ],
            "threshold": 0.9
        }
    },
    {
        "id": "CVE-2025-38057-859843c3",
        "signature_type": "Function",
        "source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@63c1f19a3be3169e51a5812d22a6d0c879414076",
        "target": {
            "file": "net/ipv4/esp4.c",
            "function": "esp_output_tcp_finish"
        },
        "deprecated": false,
        "signature_version": "v1",
        "digest": {
            "length": 341.0,
            "function_hash": "103811662120127062348343333070462933278"
        }
    },
    {
        "id": "CVE-2025-38057-a214b6fb",
        "signature_type": "Function",
        "source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@eb058693dfc93ed7a9c365adb899fedd648b9d9f",
        "target": {
            "file": "net/ipv4/esp4.c",
            "function": "esp_output_tcp_finish"
        },
        "deprecated": false,
        "signature_version": "v1",
        "digest": {
            "length": 341.0,
            "function_hash": "103811662120127062348343333070462933278"
        }
    },
    {
        "id": "CVE-2025-38057-accb0ed2",
        "signature_type": "Line",
        "source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@eb058693dfc93ed7a9c365adb899fedd648b9d9f",
        "target": {
            "file": "net/ipv6/esp6.c"
        },
        "deprecated": false,
        "signature_version": "v1",
        "digest": {
            "line_hashes": [
                "44641761696476191129002800552643641322",
                "205252438199644145343705475118968818939",
                "278157151534944029501973209530438951801",
                "125087642642230456057054545408617556237",
                "293254119149149970074394387529363164554"
            ],
            "threshold": 0.9
        }
    },
    {
        "id": "CVE-2025-38057-c7358486",
        "signature_type": "Line",
        "source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@28756f22de48d25256ed89234b66b9037a3f0157",
        "target": {
            "file": "net/ipv6/esp6.c"
        },
        "deprecated": false,
        "signature_version": "v1",
        "digest": {
            "line_hashes": [
                "44641761696476191129002800552643641322",
                "205252438199644145343705475118968818939",
                "278157151534944029501973209530438951801",
                "125087642642230456057054545408617556237",
                "293254119149149970074394387529363164554"
            ],
            "threshold": 0.9
        }
    },
    {
        "id": "CVE-2025-38057-ca359cc6",
        "signature_type": "Function",
        "source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@28756f22de48d25256ed89234b66b9037a3f0157",
        "target": {
            "file": "net/ipv6/esp6.c",
            "function": "esp_output_tcp_finish"
        },
        "deprecated": false,
        "signature_version": "v1",
        "digest": {
            "length": 341.0,
            "function_hash": "103811662120127062348343333070462933278"
        }
    },
    {
        "id": "CVE-2025-38057-e0be9823",
        "signature_type": "Function",
        "source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@eb058693dfc93ed7a9c365adb899fedd648b9d9f",
        "target": {
            "file": "net/xfrm/espintcp.c",
            "function": "espintcp_queue_out"
        },
        "deprecated": false,
        "signature_version": "v1",
        "digest": {
            "length": 240.0,
            "function_hash": "177006546006789156379969961655861575800"
        }
    },
    {
        "id": "CVE-2025-38057-e159fe9d",
        "signature_type": "Line",
        "source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@28756f22de48d25256ed89234b66b9037a3f0157",
        "target": {
            "file": "net/ipv4/esp4.c"
        },
        "deprecated": false,
        "signature_version": "v1",
        "digest": {
            "line_hashes": [
                "125800312794632689940270636345613537575",
                "52522577446151700897408279904044363767",
                "278157151534944029501973209530438951801",
                "125087642642230456057054545408617556237",
                "293254119149149970074394387529363164554"
            ],
            "threshold": 0.9
        }
    },
    {
        "id": "CVE-2025-38057-eded104c",
        "signature_type": "Line",
        "source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@28756f22de48d25256ed89234b66b9037a3f0157",
        "target": {
            "file": "net/xfrm/espintcp.c"
        },
        "deprecated": false,
        "signature_version": "v1",
        "digest": {
            "line_hashes": [
                "317244675499272915439138935153638191403",
                "11399526634604841781618104011468593256",
                "18381763933325530528564698159630231527",
                "223849348140129745141022621326663741370",
                "123670545642943573106952686159140827741"
            ],
            "threshold": 0.9
        }
    }
]

Linux / Kernel

Package

Name
Kernel

Affected ranges

Type
ECOSYSTEM
Events
Introduced
5.6.0
Fixed
6.12.31
Type
ECOSYSTEM
Events
Introduced
6.13.0
Fixed
6.14.9