hulk inclusion category: bugfix bugzilla: https://gitee.com/src-openeuler/kernel/issues/ICJTCO CVE: CVE-2025-38097 -------------------------------- commit 028363685bd0 removed encap_sk from xfrm_state, which lead to kabi breakage. Add encap_sk back to fix kabi breakage. Fixes: 028363685bd0 ("espintcp: remove encap socket caching to avoid reference leak") Signed-off-by: Dong Chenchen <dongchenchen2@huawei.com> --- include/net/xfrm.h | 1 + 1 file changed, 1 insertion(+) diff --git a/include/net/xfrm.h b/include/net/xfrm.h index 0b8a67f85d70..09a60199c502 100644 --- a/include/net/xfrm.h +++ b/include/net/xfrm.h @@ -227,6 +227,7 @@ struct xfrm_state { /* Data for encapsulator */ struct xfrm_encap_tmpl *encap; + struct sock __rcu *encap_sk; /* Data for care-of address */ xfrm_address_t *coaddr; -- 2.25.1