CVE-2025-71148: net/handshake: restore destructor on submit failure
In the Linux kernel, the following vulnerability has been resolved:
net/handshake: restore destructor on submit failure
handshakereqsubmit() replaces sk->skdestruct but never restores it when submission fails before the request is hashed. handshakeskdestruct() then returns early and the original destructor never runs, leaking the socket. Restore skdestruct on the error path.
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade
debian/linuxto a version that resolves this vulnerability.Fixed in 6.1.176-1Fixed in 6.1.190-1Fixed in 6.12.107-1Fixed in 6.12.113-1Fixed in 7.2.12-1Fixed in 7.2.13-1
Event History
Frequently Asked Questions
What is the severity of CVE-2025-71148?
CVE-2025-71148 is categorized as a medium severity vulnerability in the Linux kernel.
How do I fix CVE-2025-71148?
To fix CVE-2025-71148, you should update your Linux kernel to a patched version that addresses this vulnerability.
Which versions of Linux kernel are affected by CVE-2025-71148?
CVE-2025-71148 affects multiple versions of the Linux kernel prior to the security patch release.
What impacts does CVE-2025-71148 have on system security?
CVE-2025-71148 may lead to memory corruption, potentially allowing an attacker to execute arbitrary code in the kernel.
Who is affected by CVE-2025-71148?
Users running vulnerable versions of the Linux kernel are affected by CVE-2025-71148, particularly those using network functions.