NetSight
IP …
high8.2

CVE-2025-68365

In the Linux kernel, the following vulnerability has been resolved: fs/ntfs3: Initialize allocated memory before use KMSAN reports: Multiple uninitialized valu…

Impact

In the Linux kernel, the following vulnerability has been resolved: fs/ntfs3: Initialize allocated memory before use KMSAN reports: Multiple uninitialized values detected: - KMSAN: uninit-value in ntfs_read_hdr (3) - KMSAN: uninit-value in bcmp (3) Memory is allocated by __getname(), which is a wrapper for kmem_cache_alloc(). This memory is used before being properly cleared. Change kmem_cache_alloc() to kmem_cache_zalloc() to properly allocate and clear memory before use.

Affected products

VendorProductAffected versions
LinuxLinux Kernel
from 5.15 before 5.15.199
from 5.16 before 6.1.162
from 6.2 before 6.6.122
from 6.7 before 6.12.68
from 6.13 before 6.18.2

Weakness classification

CWE-908

References