Security Advisory

CVE-2025-71148

CVE vulnerability detail — eXtreme Datacenter Security Operations

Published 2026-01-23 14:15:14
Last updated 2026-05-11 21:55:54
Assigner Linux
State PUBLISHED

Description

In the Linux kernel, the following vulnerability has been resolved: net/handshake: restore destructor on submit failure handshake_req_submit() replaces sk->sk_destruct but never restores it when submission fails before the request is hashed. handshake_sk_destruct() then returns early and the original destructor never runs, leaking the socket. Restore sk_destruct on the error path.