CVE-2025-68727
ntfs3: Fix uninit buffer allocated by __getname()
- Published
- Last modified
- Where the record stands: published, rejected by its publisher, or superseded by another id.What do these mean? →
- published
- Whether CISA lists it in its Known Exploited Vulnerabilities catalog: proof that attackers are using it.What do these mean? →
- Not listed in CISA KEV
- Whether working attack code is public (Exploit-DB, Metasploit, Nuclei or GitHub). Public code makes attacks easier.What do these mean? →
- None on Exploit-DB, Metasploit or GitHub
Summary
In the Linux kernel, the following vulnerability has been resolved: ntfs3: Fix uninit buffer allocated by __getname() Fix uninit errors caused after buffer allocation given to 'de'; by initializing the buffer with zeroes. The fix was found by using KMSAN.
Timeline
- CVE published
- Record last updated
Affected versions
- Linux Linux
Version range not reported
- Linux Linux
5.15
References 7
git.kernel.org
- stable/c/90e23db1a85956026999c18e76f402542cb004da
- stable/c/53f4d6cb97096590410f3719f75cdf9fc5120f37
- stable/c/dcb5e3cd96b77d52bb65988e4c914636a6d4fdd9
- stable/c/4b1fd82848fdf0e01b3320815b261006c1722c3e
- stable/c/d88d4b455b6794f48d7adad52593f1700c7bd50e
- stable/c/b40a4eb4a0543d49686a6e693745009dac3b86a9
- stable/c/9948dcb2f7b5a1bf8e8710eafaf6016e00be3ad6