-

CVE-2025-68727

In the Linux kernel, the following vulnerability has been resolved:

ntfs3: Fix uninit buffer allocated by __getname()

Fix uninit errors caused after buffer allocation given to 'de'; by
initializing the buffer with zeroes. The fix was found by using KMSAN.
Verknüpft mit AI von unstrukturierten Daten zu bestehenden CPE der NVD
Diese Information steht angemeldeten Benutzern zur Verfügung. Login Login
Daten sind bereitgestellt durch das CVE Programm von einer CVE Numbering Authority (CNA) (Unstrukturiert).
HerstellerLinux
≫
Produkt Linux
Default Statusunaffected
Version < 90e23db1a85956026999c18e76f402542cb004da
Version 78ab59fee07f22464f32eafebab2bd97ba94ff2d
Status affected
Version < 53f4d6cb97096590410f3719f75cdf9fc5120f37
Version 78ab59fee07f22464f32eafebab2bd97ba94ff2d
Status affected
Version < dcb5e3cd96b77d52bb65988e4c914636a6d4fdd9
Version 78ab59fee07f22464f32eafebab2bd97ba94ff2d
Status affected
Version < 4b1fd82848fdf0e01b3320815b261006c1722c3e
Version 78ab59fee07f22464f32eafebab2bd97ba94ff2d
Status affected
Version < d88d4b455b6794f48d7adad52593f1700c7bd50e
Version 78ab59fee07f22464f32eafebab2bd97ba94ff2d
Status affected
Version < b40a4eb4a0543d49686a6e693745009dac3b86a9
Version 78ab59fee07f22464f32eafebab2bd97ba94ff2d
Status affected
Version < 9948dcb2f7b5a1bf8e8710eafaf6016e00be3ad6
Version 78ab59fee07f22464f32eafebab2bd97ba94ff2d
Status affected
HerstellerLinux
≫
Produkt Linux
Default Statusaffected
Version 5.15
Status affected
Version < 5.15
Version 0
Status unaffected
Version <= 5.15.*
Version 5.15.198
Status unaffected
Version <= 6.1.*
Version 6.1.160
Status unaffected
Version <= 6.6.*
Version 6.6.120
Status unaffected
Version <= 6.12.*
Version 6.12.63
Status unaffected
Version <= 6.17.*
Version 6.17.13
Status unaffected
Version <= 6.18.*
Version 6.18.2
Status unaffected
Version <= *
Version 6.19-rc1
Status unaffected
Zu dieser CVE wurde keine CISA KEV oder CERT.AT-Warnung gefunden.
EPSS Metriken
Typ Quelle Score Percentile
EPSS FIRST.org 0.04% 0.1
CVSS Metriken
Quelle Base Score Exploit Score Impact Score Vector String
Es wurden noch keine Informationen zu CWE veröffentlicht.