Unverified50% confidenceFactExact time
As long as any process holds a reference to a socket file descriptor, the corresponding socket will not be reclaimed by the kernel—this is the underlying mechanism by which port leaks can survive across processes.
1
Sources
50%
Confidence
Long-term
Relevance
8/9/2026
First Seen
Sources
Cursor端口泄漏：Linux下600+端口转发未清理的排查与解决
Related Claims
UnverifiedIn the Linux kernel, each network socket is represented as a file descriptor; when a process forks a child process, the child inherits the parent's file descriptor table via a reference-counting mechanism, causing port leaks to survive across processes.76% similarUnverifiedWhen a parent process exits without properly closing its sockets, if child processes have inherited these file descriptors, they will be kept in a LISTEN or ESTABLISHED state indefinitely, causing port forwarding to become orphaned.70% similarUnverifiedLeakCanary触发heap dump后以.hprof快照格式保存堆内存，并还原从GC Root到泄漏对象的完整引用链62% similarUnverifiedThe container escape vulnerability CVE-2019-5736 (runc vulnerability) was discovered because all containers share the same kernel61% similarUnverifiedLinux内核包含超过2800万行代码，容器共享同一宿主内核，内核漏洞可能成为逃逸路径60% similar
Cite This Claim
Stable URI
https://kongchang.com/claim/714153API
curl https://kongchang.com/api/v1/knowledge/claims/714153MCP
get_claim(id=714153)