CVE-2025-68365
Severity CVSS v4.0:
Pending analysis
Type:
Unavailable / Other
Publication date:
24/12/2025
Last modified:
06/02/2026
Description
In the Linux kernel, the following vulnerability has been resolved:<br />
<br />
fs/ntfs3: Initialize allocated memory before use<br />
<br />
KMSAN reports: Multiple uninitialized values detected:<br />
<br />
- KMSAN: uninit-value in ntfs_read_hdr (3)<br />
- KMSAN: uninit-value in bcmp (3)<br />
<br />
Memory is allocated by __getname(), which is a wrapper for<br />
kmem_cache_alloc(). This memory is used before being properly<br />
cleared. Change kmem_cache_alloc() to kmem_cache_zalloc() to<br />
properly allocate and clear memory before use.
Impact
References to Advisories, Solutions, and Tools
- https://git.kernel.org/stable/c/192e8ce302f14ac66259231dd10cede19858d742
- https://git.kernel.org/stable/c/7d52c592cf53f5bb7163967edc01d2d7d80de44a
- https://git.kernel.org/stable/c/a58e29849aef8d26554a982989a2190b49aaf8ed
- https://git.kernel.org/stable/c/a8a3ca23bbd9d849308a7921a049330dc6c91398
- https://git.kernel.org/stable/c/bdf38063fd15f2fc7361dc0b5d3c259741eab835
- https://git.kernel.org/stable/c/f7728057220cabd720e27e46097edad48e5bd728



