CVE-2025-71148
Unknown Unknown - Not Provided
BaseFortify

Publication date: 2026-01-23

Last updated on: 2026-02-26

Assigner: kernel.org

Description
In the Linux kernel, the following vulnerability has been resolved: net/handshake: restore destructor on submit failure handshake_req_submit() replaces sk->sk_destruct but never restores it when submission fails before the request is hashed. handshake_sk_destruct() then returns early and the original destructor never runs, leaking the socket. Restore sk_destruct on the error path.
CVSS Scores
EPSS Scores
Probability:
Percentile:
Meta Information
Published
2026-01-23
Last Modified
2026-02-26
Generated
2026-06-16
AI Q&A
2026-01-23
EPSS Evaluated
2026-06-15
NVD
CVE-2025-71148
EUVD
EUVD-2026-4399
Affected Vendors & Products
Showing 4 associated CPEs
Vendor Product Version / Range
linux linux_kernel 6.19
linux linux_kernel From 6.7 (inc) to 6.12.64 (exc)
linux linux_kernel From 6.13 (inc) to 6.18.3 (exc)
linux linux_kernel From 6.4 (inc) to 6.6.120 (exc)
Helpful Resources
Exploitability
CWE
CWE Icon
KEV
KEV Icon
CWE ID Description
CWE-UNKNOWN
Attack-Flow Graph
AI Quick Actions
Instant insights powered by AI
Executive Summary

This vulnerability occurs in the Linux kernel's network handshake code where a function called handshake_req_submit() replaces a socket destructor (sk_destruct) but fails to restore it if the submission fails before the request is hashed. As a result, the original destructor never runs, causing the socket to leak.

Impact Analysis

The impact of this vulnerability is that sockets may leak due to the original destructor not being called on submission failure. This can lead to resource leaks in the system, potentially degrading performance or causing denial of service over time.

Chat Assistant
Ask questions about this CVE
Hi! I’m here to help you understand CVE-2025-71148. Ask me anything about the vulnerability, its impact, or mitigation strategies.
0/70
EPSS Chart