In the Linux kernel, the following vulnerability has been resolved: net/handshake: restore destructor on submit failure handshake_req_submit() replaces sk->sk_destruct but never restores it when submission fails before the request is hashed. handshake_sk_destruct() then returns early and the original destructor never runs, leaking the socket. Restore sk_destruct on the error path.
| Product | Vendor | Version |
|---|---|---|
| Linux | Linux | 11.1.2.4 |
| Linux | Linux | Android-6.0 |
| Linux | Linux | 12.2(33)SCJ1a |
| Linux | Linux | 12.2(33)SCJ2c |