VYPR
Unrated severityNVD Advisory· Published Dec 24, 2025· Updated Feb 9, 2026

fs/ntfs3: Initialize allocated memory before use

CVE-2025-68365

Description

In the Linux kernel, the following vulnerability has been resolved:

fs/ntfs3: Initialize allocated memory before use

KMSAN reports: Multiple uninitialized values detected:

  • KMSAN: uninit-value in ntfs_read_hdr (3)
  • KMSAN: uninit-value in bcmp (3)

Memory is allocated by __getname(), which is a wrapper for kmem_cache_alloc(). This memory is used before being properly cleared. Change kmem_cache_alloc() to kmem_cache_zalloc() to properly allocate and clear memory before use.

Affected products

2

Patches

0

No patches discovered yet.

Vulnerability mechanics

AI mechanics synthesis has not run for this CVE yet.

References

6

News mentions

0

No linked articles in our index yet.