A heap buffer overflow flaw was found in IPsec ESP transformation code in
net/ipv4/esp4.c and net/ipv6/esp6.c. This flaw allows a local attacker with
a normal user privilege to overwrite kernel heap objects and may cause a
local privilege escalation threat.

It was discovered that the IPsec implementation in the Linux kernel did not
properly allocate enough memory when performing ESP transformations,
leading to a heap-based buffer overflow. A local attacker could use this to
cause a denial of service (system crash) or possibly execute arbitrary
code.