CVE-2025-71148

A socket leak vulnerability was found in the Linux kernel's TLS handshake subsystem. When handshake_req_submit() fails before the request is hashed, it does not restore the original sk->sk_destruct pointer. This causes handshake_sk_destruct() to return early without calling the original destructor, resulting in a socket resource leak that accumulates over time.

This vulnerability affects systems using kernel TLS handshake functionality (kTLS). The socket leak occurs on submission error paths, and repeated failures can gradually exhaust socket resources. Exploitation requires the ability to trigger TLS handshake operations that fail during submission, typically requiring local access and specific network configurations.

The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.