Riskcovery

CVE-2025-71148

net/handshake: restore destructor on submit failure

State
Published
Severity
Not scored
Published
Jan 23, 2026
Updated
May 11, 2026
Reserved
Jan 13, 2026

Read the record on cve.org

Description

In the Linux kernel, the following vulnerability has been resolved:

net/handshake: restore destructor on submit failure

handshake_req_submit() replaces sk->sk_destruct but never restores it when submission fails before the request is hashed. handshake_sk_destruct() then returns early and the original destructor never runs, leaking the socket. Restore sk_destruct on the error path.

Scores

The record has no CVSS score.

Weaknesses

The record names no weakness.

Affected Products

ProductVersions
LinuxLinux
  • 3b3009ea8abb713b022d94fba95ec270cf6e7eae to before cd8cf2be3717137554744233fda051ffc09d1d44Affected
  • 3b3009ea8abb713b022d94fba95ec270cf6e7eae to before 7b82a1d6ae869533d8bdb0282a3a78faed8e63ddAffected
  • 3b3009ea8abb713b022d94fba95ec270cf6e7eae to before b225325be7b247c7268e65eea6090db1fc786d1fAffected
  • 3b3009ea8abb713b022d94fba95ec270cf6e7eae to before 6af2a01d65f89e73c1cbb9267f8880d83a88cee4Affected
LinuxLinux
  • 6.4Affected
  • before 6.4Not affected
  • 6.6.120 through 6.6.*Not affected
  • 6.12.64 through 6.12.*Not affected
  • 6.18.3 through 6.18.*Not affected
  • 6.19 and laterNot affected

References

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.