SECUFOCUSNOW
Home›CVE index›CVE-2025-68775
Review reviewCritical

CVE-2025-68775

Linux

In the Linux kernel, the following vulnerability has been resolved: net/handshake: duplicate handshake cancellations leak socket When a handshake request is cancelled it is removed from the handshake_net->hn_requests list, but it is still present in the handshake_rhashtbl until it is destroyed. If a second cancellation request arrives for the same handshake request, then remove_pending() will return false... and assuming HANDSHAKE_F_REQ_COMPLETED isn't set in req->hr_flags, we'll continue processing through the out_true label, where we put another reference on the sock and a refcount underf...

CVSS
9.8
EPSS
0.46%
37.4% percentile
CISA KEV
Not listed
Published
2026.01.14
PRIORITY ASSESSMENT

Review review

The CVSS severity warrants an early asset and exposure review.

Known exploitationNot established by KEV
Exploit probability0.46%
Technical severityCVSS 9.8

Vulnerability overview

In the Linux kernel, the following vulnerability has been resolved: net/handshake: duplicate handshake cancellations leak socket When a handshake request is cancelled it is removed from the handshake_net->hn_requests list, but it is still present in the handshake_rhashtbl until it is destroyed. If a second cancellation request arrives for the same handshake request, then remove_pending() will return false... and assuming HANDSHAKE_F_REQ_COMPLETED isn't set in req->hr_flags, we'll continue processing through the out_true label, where we put another reference on the sock and a refcount underf...

Affected product and versions

Product
Linux
Affected versions
>= 3b3009ea8abb713b022d94fba95ec270cf6e7eae < 011ae80c49d9bfa5b4336f8bd387cd25c7593663, >= 3b3009ea8abb713b022d94fba95ec270cf6e7eae < e1641177e7fb48a0a5a06658d4aab51da6656659, >= 3b3009ea8abb713b022d94fba95ec270cf6e7eae < 3c330f1dee3cd92b57e19b9d21dc8ce5970b09be, >= 3b3009ea8abb713b022d94fba95ec270cf6e7eae < 15564bd67e2975002f2a8e9defee33e321d3183f, >= 6.4
Fixed versions
No verified fixed-version field is available yet

Recommended response sequence

Confirm exposure before applying a vendor-supported change.

Full remediation guide
  1. 1
    Identify

    Confirm that Linux and an affected version are present.

  2. 2
    Prioritize

    Combine exploitation signals with asset exposure and business criticality.

  3. 3
    Remediate

    Follow the vendor advisory or supported update path and preserve rollback options.

  4. 4
    Verify

    Recheck the version, service health, access paths, and relevant logs.

Technical data

CVSS vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
CWE
Not available