Dashboard / CVE-2025-71148

CVE-2025-71148

LOW
INFO Priority: 0.00 BB Relevance: 32/100
Published: 2026-01-23 Modified: 2026-11-05 First seen: 2026-11-05 Status: active

Attack Surface

Low Complexity No Interaction

CVSS Vector Breakdown

AV: Local
AC: Low
PR: Low
UI: None
S: Unchanged
C: Low
I: None
A: None

Description

In the Linux kernel, the following vulnerability has been resolved: net/handshake: restore destructor on submit failure handshake_req_submit() replaces sk->sk_destruct but never restores it when submission fails before the request is hashed. handshake_sk_destruct() then returns early and the original destructor never runs, leaking the socket. Restore sk_destruct on the error path.

Affected Software (7)

VendorProductVersion
Linux Linux 3b3009ea8abb713b022d94fba95ec270cf6e7eae < cd8cf2be3717137554744233fda051ffc09d1d44
Linux Linux 3b3009ea8abb713b022d94fba95ec270cf6e7eae < 7b82a1d6ae869533d8bdb0282a3a78faed8e63dd
Linux Linux 3b3009ea8abb713b022d94fba95ec270cf6e7eae < b225325be7b247c7268e65eea6090db1fc786d1f
Linux Linux 3b3009ea8abb713b022d94fba95ec270cf6e7eae < 6af2a01d65f89e73c1cbb9267f8880d83a88cee4
Linux Linux 6.4
linux linux_kernel 6.4 – 6.6.120
linux linux_kernel 6.19

References & Advisories (4)

Bug Bounty Relevance

32 / 100
✓ Low complexity
✓ No user interaction

CVSS Score

3.3 / 10.0 v3.1
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N

EPSS — Exploitation Probability

0.13%
Raw Score 0.001320
Percentile 2.9%
Date 2026-11-14

EPSS Trend

2026-11-14
0.00132
2026-11-13
0.00132
2026-11-12
0.00132
2026-11-10
0.00132
2026-11-09
0.00132
2026-11-08
0.00132
2026-11-07
0.00132
2026-11-06
0.00132
2026-11-05
0.00132

Intelligence Sources

mitre ref →
nvd ref →

External Links