Skip to content
CVE PROGRAM SOURCE RECORDUnscored

CVE-2025-71148

net/handshake: restore destructor on submit failure

Description

In the Linux kernel, the following vulnerability has been resolved: net/handshake: restore destructor on submit failure handshake_req_submit() replaces sk->sk_destruct but never restores it when submission fails before the request is hashed. handshake_sk_destruct() then returns early and the original destructor never runs, leaking the socket. Restore sk_destruct on the error path.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

Linux Linux

Default version status: unaffected

  • 3b3009ea8abb713b022d94fba95ec270cf6e7eae to < cd8cf2be3717137554744233fda051ffc09d1d44affected
  • 3b3009ea8abb713b022d94fba95ec270cf6e7eae to < 7b82a1d6ae869533d8bdb0282a3a78faed8e63ddaffected
  • 3b3009ea8abb713b022d94fba95ec270cf6e7eae to < b225325be7b247c7268e65eea6090db1fc786d1faffected
  • 3b3009ea8abb713b022d94fba95ec270cf6e7eae to < 6af2a01d65f89e73c1cbb9267f8880d83a88cee4affected

Linux Linux

Default version status: affected

  • 6.4affected
  • 0 to < 6.4unaffected
  • 6.6.120 to ≤ 6.6.*unaffected
  • 6.12.64 to ≤ 6.12.*unaffected
  • 6.18.3 to ≤ 6.18.*unaffected
  • 6.19 to ≤ *unaffected

References