CVE-2025-71148

Name of the Vulnerable Software and Affected Versions Linux kernel (affected versions not specified)

Description A flaw exists in the Linux kernel's networking subsystem related to socket destruction. Specifically, the handshake req submit() function replaces the socket's destructor (sk->sk destruct) but fails to restore it if submission fails before the request is hashed. This leads to a memory leak because the original destructor is not executed when handshake sk destruct() returns prematurely. The issue is addressed by restoring the socket destructor on the error path.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.