xfrm: stable backport for 9.8 phase 2

Sabrina Dubrocarequested to merge
sdubroca/centos-stream-9:RHEL-115629 into main

JIRA: https://issues.redhat.com/browse/RHEL-115629

Backport of commits: 63c1f19a3be3 ("espintcp: fix skb leaks") 028363685bd0 ("espintcp: remove encap socket caching to avoid reference leak") e7a37c9e428a ("xfrm: use kfree_sensitive() for SA secret zeroization")

Signed-off-by: Sabrina Dubroca sdubroca@redhat.com

Merge request reports