CVE-2025-68727

Linux Kernel 5.15.0-6.18.1 - Uninitialized Memory Exposure in NTFS3 __getname()

Title source: llm
STIX 2.1

Description

In the Linux kernel, the following vulnerability has been resolved: ntfs3: Fix uninit buffer allocated by __getname() Fix uninit errors caused after buffer allocation given to 'de'; by initializing the buffer with zeroes. The fix was found by using KMSAN.

References (7)

Core 7

Scores

EPSS 0.0005
EPSS Percentile 15.3%

Details

Status published
Products (22)
linux/Kernel 5.15.0 - 5.15.198linux
linux/Kernel 5.16.0 - 6.1.160linux
linux/Kernel 6.13.0 - 6.17.13linux
linux/Kernel 6.18.0 - 6.18.2linux
linux/Kernel 6.2.0 - 6.6.120linux
linux/Kernel 6.7.0 - 6.12.63linux
Linux/Linux < 5.15
Linux/Linux 5.15
Linux/Linux 5.15.198 - 5.15.*
Linux/Linux 6.1.160 - 6.1.*
... and 12 more
Published Dec 24, 2025
Tracked Since Feb 18, 2026