CVE-2025-71148

  1. OpenCVE
  2. Vulnerabilities (CVE)
  3. CVE-2025-71148
In the Linux kernel, the following vulnerability has been resolved: net/handshake: restore destructor on submit failure handshake_req_submit() replaces sk->sk_destruct but never restores it when submission fails before the request is hashed. handshake_sk_destruct() then returns early and the original destructor never runs, leaking the socket. Restore sk_destruct on the error path.

3.3 /10

CVSS v3 : LOW

V3 Legend

Vector :

Exploitability : 1.8 / Impact : 1.4

Attack Vector LOCAL

Attack Complexity LOW

Privileges Required LOW

User Interaction NONE

Confidentiality Impact LOW

Integrity Impact NONE

Availability Impact NONE

Scope UNCHANGED

References
Link Resource
https://git.kernel.org/stable/c/6af2a01d65f89e73c1cbb9267f8880d83a88cee4 Patch
https://git.kernel.org/stable/c/7b82a1d6ae869533d8bdb0282a3a78faed8e63dd Patch
https://git.kernel.org/stable/c/b225325be7b247c7268e65eea6090db1fc786d1f Patch
https://git.kernel.org/stable/c/cd8cf2be3717137554744233fda051ffc09d1d44 Patch
Configurations

Configuration 1 (hide)

OR cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:6.19:rc1:*:*:*:*:*:*
History

26 Feb 2026, 20:27

Type Values Removed Values Added
References () https://git.kernel.org/stable/c/6af2a01d65f89e73c1cbb9267f8880d83a88cee4 - () https://git.kernel.org/stable/c/6af2a01d65f89e73c1cbb9267f8880d83a88cee4 - Patch
References () https://git.kernel.org/stable/c/7b82a1d6ae869533d8bdb0282a3a78faed8e63dd - () https://git.kernel.org/stable/c/7b82a1d6ae869533d8bdb0282a3a78faed8e63dd - Patch
References () https://git.kernel.org/stable/c/b225325be7b247c7268e65eea6090db1fc786d1f - () https://git.kernel.org/stable/c/b225325be7b247c7268e65eea6090db1fc786d1f - Patch
References () https://git.kernel.org/stable/c/cd8cf2be3717137554744233fda051ffc09d1d44 - () https://git.kernel.org/stable/c/cd8cf2be3717137554744233fda051ffc09d1d44 - Patch
CWE NVD-CWE-noinfo
CPE cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:6.19:rc1:*:*:*:*:*:*
First Time Linux
Linux linux Kernel
CVSS v2 : unknown
v3 : unknown 		v2 : unknown
v3 : 3.3

23 Jan 2026, 15:16

Type Values Removed Values Added
New CVE
Information

Published : 2026-01-23 15:16

Updated : 2026-02-26 20:27

NVD link : CVE-2025-71148

Mitre link : CVE-2025-71148

CVE.ORG link : CVE-2025-71148

JSON object : View

Products Affected

linux

  • linux_kernel
CWE
NVD-CWE-noinfo