CVE-2025-38057

A flaw was found in the Linux kernel's ESP-in-TCP (Encapsulating Security Payload in Transmission Control Protocol) implementation. Certain error-handling routines fail to properly release allocated network socket buffers, resulting in a memory leak. An attacker capable of triggering these error conditions can cause gradual system memory exhaustion, potentially leading to a Denial of Service (DoS).

The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.