From 7e6e327581a3dfd8e50b58624b6a2fa42009feae Mon Sep 17 00:00:00 2001
From: Timo Kreuzer <timo.kreuzer@reactos.org>
Date: Sat, 13 Sep 2025 12:38:02 +0300
Subject: [PATCH] [NTOS:SE] Fix handle leak on failure in SepOpenThreadToken

---
 ntoskrnl/se/token.c | 1 +
 1 file changed, 1 insertion(+)

diff --git a/ntoskrnl/se/token.c b/ntoskrnl/se/token.c
index 83335415669..90015143a08 100644
--- a/ntoskrnl/se/token.c
+++ b/ntoskrnl/se/token.c
@@ -1335,6 +1335,7 @@ SepOpenThreadToken(
     if (!NT_SUCCESS(Status))
     {
         DPRINT1("Failed to impersonate the client (Status 0x%lx)\n", Status);
+        ObCloseHandle(TokenHandle, PreviousMode);
         ObDereferenceObject(NewToken);
         ObDereferenceObject(Thread2);
         return Status;