CVE-2025-68365

fs/ntfs3: Initialize allocated memory before use

State: Published
Severity: 8.2 High
Published: Dec 24, 2025
Updated: Aug 5, 2026
Reserved: Dec 16, 2025

Description

In the Linux kernel, the following vulnerability has been resolved:

fs/ntfs3: Initialize allocated memory before use

KMSAN reports: Multiple uninitialized values detected:

- KMSAN: uninit-value in ntfs_read_hdr (3) - KMSAN: uninit-value in bcmp (3)

Memory is allocated by __getname(), which is a wrapper for kmem_cache_alloc(). This memory is used before being properly cleared. Change kmem_cache_alloc() to kmem_cache_zalloc() to properly allocate and clear memory before use.

Scores

CVSS	Score	Vector	Source
3.1	8.2 High	CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:H	Linux

Weaknesses

The record names no weakness.

Affected Products

Product	Versions
LinuxLinux	82cae269cfa953032fbb8980a7d554d60fb00b17 to before bdf38063fd15f2fc7361dc0b5d3c259741eab835Affected 82cae269cfa953032fbb8980a7d554d60fb00b17 to before a58e29849aef8d26554a982989a2190b49aaf8edAffected 82cae269cfa953032fbb8980a7d554d60fb00b17 to before 7d52c592cf53f5bb7163967edc01d2d7d80de44aAffected 82cae269cfa953032fbb8980a7d554d60fb00b17 to before f7728057220cabd720e27e46097edad48e5bd728Affected 82cae269cfa953032fbb8980a7d554d60fb00b17 to before 192e8ce302f14ac66259231dd10cede19858d742Affected 82cae269cfa953032fbb8980a7d554d60fb00b17 to before a8a3ca23bbd9d849308a7921a049330dc6c91398Affected
LinuxLinux	5.15Affected before 5.15Not affected 5.15.199 through 5.15.Not affected 6.1.162 through 6.1.Not affected 6.6.122 through 6.6.Not affected 6.12.68 through 6.12.Not affected 6.18.2 through 6.18.*Not affected 6.19 and laterNot affected

Product

Versions

LinuxLinux

82cae269cfa953032fbb8980a7d554d60fb00b17 to before bdf38063fd15f2fc7361dc0b5d3c259741eab835Affected
82cae269cfa953032fbb8980a7d554d60fb00b17 to before a58e29849aef8d26554a982989a2190b49aaf8edAffected
82cae269cfa953032fbb8980a7d554d60fb00b17 to before 7d52c592cf53f5bb7163967edc01d2d7d80de44aAffected
82cae269cfa953032fbb8980a7d554d60fb00b17 to before f7728057220cabd720e27e46097edad48e5bd728Affected
82cae269cfa953032fbb8980a7d554d60fb00b17 to before 192e8ce302f14ac66259231dd10cede19858d742Affected
82cae269cfa953032fbb8980a7d554d60fb00b17 to before a8a3ca23bbd9d849308a7921a049330dc6c91398Affected

LinuxLinux

5.15Affected
before 5.15Not affected
5.15.199 through 5.15.*Not affected
6.1.162 through 6.1.*Not affected
6.6.122 through 6.6.*Not affected
6.12.68 through 6.12.*Not affected
6.18.2 through 6.18.*Not affected
6.19 and laterNot affected

References

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.