Patch "xfrm_user: uncoditionally validate esn replay attribute struct" has been added to the 4.14-stable tree