-

CVE-2025-68727

ntfs3: Fix uninit buffer allocated by __getname()

In the Linux kernel, the following vulnerability has been resolved:

ntfs3: Fix uninit buffer allocated by __getname()

Fix uninit errors caused after buffer allocation given to 'de'; by
initializing the buffer with zeroes. The fix was found by using KMSAN.
Daten sind bereitgestellt durch das CVE Programm von einer CVE Numbering Authority (CNA) (Unstrukturiert).
HerstellerLinux
≫
Produkt Linux
Default Statusunaffected
Version 78ab59fee07f22464f32eafebab2bd97ba94ff2d
Version < 90e23db1a85956026999c18e76f402542cb004da
Status affected
Version 78ab59fee07f22464f32eafebab2bd97ba94ff2d
Version < 53f4d6cb97096590410f3719f75cdf9fc5120f37
Status affected
Version 78ab59fee07f22464f32eafebab2bd97ba94ff2d
Version < dcb5e3cd96b77d52bb65988e4c914636a6d4fdd9
Status affected
Version 78ab59fee07f22464f32eafebab2bd97ba94ff2d
Version < 4b1fd82848fdf0e01b3320815b261006c1722c3e
Status affected
Version 78ab59fee07f22464f32eafebab2bd97ba94ff2d
Version < d88d4b455b6794f48d7adad52593f1700c7bd50e
Status affected
Version 78ab59fee07f22464f32eafebab2bd97ba94ff2d
Version < b40a4eb4a0543d49686a6e693745009dac3b86a9
Status affected
Version 78ab59fee07f22464f32eafebab2bd97ba94ff2d
Version < 9948dcb2f7b5a1bf8e8710eafaf6016e00be3ad6
Status affected
HerstellerLinux
≫
Produkt Linux
Default Statusaffected
Version 5.15
Status affected
Version 0
Version < 5.15
Status unaffected
Version <= 5.15.*
Version 5.15.198
Status unaffected
Version <= 6.1.*
Version 6.1.160
Status unaffected
Version <= 6.6.*
Version 6.6.120
Status unaffected
Version <= 6.12.*
Version 6.12.63
Status unaffected
Version <= 6.17.*
Version 6.17.13
Status unaffected
Version <= 6.18.*
Version 6.18.2
Status unaffected
Version <= *
Version 6.19
Status unaffected
VulnDex Vulnerability Enrichment
Diese Information steht angemeldeten Benutzern zur Verfügung. Login Login
Zu dieser CVE wurde keine Warnung gefunden.
EPSS Metriken
Typ Quelle Score Percentile
EPSS FIRST.org 0.07% 0.208
CVSS Metriken
Quelle Base Score Exploit Score Impact Score Vector String
Es wurden noch keine Informationen zu CWE veröffentlicht.