Thanks for the clarification.

In that case, I would like to request backporting both of the following 
commits to the LTS kernels to resolve the UAF issue:

Commit b441cf3f8c4b ("xfrm: delete x->tunnel as we delete x")
Commit 10deb6986484 ("xfrm: also call xfrm_state_delete_tunnel at destroy 
time for states that were never added")

Please consider queuing them up together.

Thanks, 
Slavin