The vulnerability in the Linux kernel's net/handshake code relates to improper management of the file pointer backing req->hr_sk->sk_socket. The existing sock_hold() call only maintains the struct sock, but the struct socket is owned by sock->file, which can be prematurely released causing socket teardown. The patch adds an explicit file reference (hr_file) in struct handshake_req acquired during handshake_req_submit() and released upon completion or cancellation. The submit error path is gated with a test_and_set_bit to serialize cleanup and avoid races with concurrent cancellations. The accept-side dereferences remain unmodified and will be addressed in a subsequent patch.

Improper reference management could lead to premature socket teardown during handshake request processing, potentially causing use-after-free or resource management issues within the kernel networking stack. This could affect kernel stability or reliability but no known exploits in the wild have been reported.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. The description indicates a patch has been developed to address the issue, but no explicit patch links or vendor advisories are provided. Users should monitor official Linux kernel updates for this fix and apply it once available.