Linux Kernel espintcp Encapsulation Socket Caching Reference Leak Vulnerability

A vulnerability in the Linux kernel's espintcp implementation was introduced by caching user-space encapsulation sockets, which can lead to reference leaks when deleting network namespaces. The issue arises because the cached socket holds a reference to the network namespace. If the espintcp state is deleted before the network namespace, the reference is dropped, potentially leaving the namespace unreachable for deletion. This vulnerability has been addressed by removing the socket caching, although it may introduce a slight performance regression.

Impact

Exploitation of this vulnerability could lead to reference leaks, causing network namespaces to become unreachable and preventing proper cleanup, which could result in resource leaks or other unintended consequences.