BaseFortify

Publication date: 2026-01-23

Last updated on: 2026-02-26

Assigner: kernel.org

Description

In the Linux kernel, the following vulnerability has been resolved: net/handshake: restore destructor on submit failure handshake_req_submit() replaces sk->sk_destruct but never restores it when submission fails before the request is hashed. handshake_sk_destruct() then returns early and the original destructor never runs, leaking the socket. Restore sk_destruct on the error path.

CVSS Scores

EPSS Scores

Probability:
Percentile:

Meta Information

Published

2026-01-23

Last Modified

2026-02-26

Generated

2026-07-06

AI Q&A

2026-01-23

EPSS Evaluated

2026-07-05

NVD

CVE-2025-71148

EUVD

EUVD-2026-4399

Affected Vendors & Products

Vendor	Product	Version / Range
linux	linux_kernel	6.19
linux	linux_kernel	From 6.7 (inc) to 6.12.64 (exc)
linux	linux_kernel	From 6.13 (inc) to 6.18.3 (exc)
linux	linux_kernel	From 6.4 (inc) to 6.6.120 (exc)

Helpful Resources

Exploitability

CWE

KEV

CWE ID	Description
CWE-UNKNOWN

Attack-Flow Graph

Executive Summary

This vulnerability occurs in the Linux kernel's network handshake code where a function called handshake_req_submit() replaces a socket destructor (sk_destruct) but fails to restore it if the submission fails before the request is hashed. As a result, the original destructor never runs, causing the socket to leak.

Impact Analysis

The impact of this vulnerability is that sockets may leak due to the original destructor not being called on submission failure. This can lead to resource leaks in the system, potentially degrading performance or causing denial of service over time.

Hi! I’m here to help you understand CVE-2025-71148. Ask me anything about the vulnerability, its impact, or mitigation strategies.

0/70