CVE-2025-71148: net/handshake: restore destructor on submit failure

Low severity · published Jan 23, 2026

CVE-2025-71148

net/handshake: restore destructor on submit failure

3.3

CVSS

0.1%

EPSS

On KEV

Description

In the Linux kernel, the following vulnerability has been resolved: net/handshake: restore destructor on submit failure handshake_req_submit() replaces sk->sk_destruct but never restores it when submission fails before the request is hashed. handshake_sk_destruct() then returns early and the original destructor never runs, leaking the socket. Restore sk_destruct on the error path.

CVSS vector

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N

Attack vector

Local

Complexity

Low

Privileges

Low

User interaction

None

Confidentiality

Low

Integrity

None

Availability

None

Scope

Unchanged

Exploitation

Is it being used?

Exploit prediction (EPSS)0.1% · higher than 3% of CVEs

Exploited in the wildNo evidence yet

CISA KEVNot listed

Ransomware campaign useNot known

Affected products

Which versions

Kernel · Linux

6.4 before 6.6.120; 6.7 before 6.12.64; 6.13 before 6.18.3; 6.19 · source: NVD

Linux · Linux

3b3009ea8abb713b022d94fba95ec270cf6e7eae before cd8cf2be3717137554744233fda051ffc09d1d44; 3b3009ea8abb713b022d94fba95ec270cf6e7eae before 7b82a1d6ae869533d8bdb0282a3a78faed8e63dd; 3b3009ea8abb713b022d94fba95ec270cf6e7eae before b225325be7b247c7268e65eea6090db1fc786d1f; 3b3009ea8abb713b022d94fba95ec270cf6e7eae before 6af2a01d65f89e73c1cbb9267f8880d83a88cee4; 6.4 · source: vendor

Affected product

Kernel

Linux

All Kernel CVEs

References

NVD

https://nvd.nist.gov/vuln/detail/CVE-2025-71148

CVE.org

https://www.cve.org/CVERecord?id=CVE-2025-71148

Patch

https://git.kernel.org/stable/c/6af2a01d65f89e73c1cbb9267f8880d83a88cee4

Patch

https://git.kernel.org/stable/c/7b82a1d6ae869533d8bdb0282a3a78faed8e63dd

Patch

https://git.kernel.org/stable/c/b225325be7b247c7268e65eea6090db1fc786d1f

Patch

https://git.kernel.org/stable/c/cd8cf2be3717137554744233fda051ffc09d1d44