CVE-2025-68775

A race condition flaw was found in the Linux kernel's network handshake subsystem. When duplicate handshake cancellation requests arrive for the same TLS handshake (such as during SUNRPC/NFS TLS negotiation timeouts), the code fails to detect the duplicate and incorrectly manipulates the socket reference count, leading to a refcount underflow and potential socket resource leak.

This flaw requires specific timing conditions during TLS handshake failures with SUNRPC clients and the tlshd daemon. The impact is limited to socket resource leaks rather than memory corruption or code execution. Systems not using NFS with TLS (AUTH_TLS/RPC-over-TLS) are unaffected.

The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.