CVE-2025-71148: Linux

Описание

Оригинално описание

In the Linux kernel, the following vulnerability has been resolved: net/handshake: restore destructor on submit failure handshake_req_submit() replaces sk->sk_destruct but never restores it when submission fails before the request is hashed. handshake_sk_destruct() then returns early and the original destructor never runs, leaking the socket. Restore sk_destruct on the error path.

Засегнати продукти

• Linux Linux: 3b3009ea8abb713b022d94fba95ec270cf6e7eae преди cd8cf2be3717137554744233fda051ffc09d1d44; 3b3009ea8abb713b022d94fba95ec270cf6e7eae преди 7b82a1d6ae869533d8bdb0282a3a78faed8e63dd; 3b3009ea8abb713b022d94fba95ec270cf6e7eae преди b225325be7b247c7268e65eea6090db1fc786d1f; 3b3009ea8abb713b022d94fba95ec270cf6e7eae преди 6af2a01d65f89e73c1cbb9267f8880d83a88cee4
• Linux Linux: 6.4; преди 6.4; 6.6.120 до 6.6.*; 6.12.64 до 6.12.*; 6.18.3 до 6.18.*; от 6.19 нататък

История

Други уязвимости в Linux Linux

• 8.1CVE-2026-99270
• 7.8CVE-2026-99269
• CVE-2026-99265
• CVE-2026-99261
• CVE-2026-99260

Първоизточници

• https://www.cve.org/CVERecord?id=CVE-2025-71148
• https://nvd.nist.gov/vuln/detail/CVE-2025-71148
• https://git.kernel.org/stable/c/cd8cf2be3717137554744233fda051ffc09d1d44
• https://git.kernel.org/stable/c/7b82a1d6ae869533d8bdb0282a3a78faed8e63dd
• https://git.kernel.org/stable/c/b225325be7b247c7268e65eea6090db1fc786d1f
• https://git.kernel.org/stable/c/6af2a01d65f89e73c1cbb9267f8880d83a88cee4