CVE-2025-68727: ntfs3: Fix uninit buffer allocated by __getname()
In the Linux kernel, the following vulnerability has been resolved:
ntfs3: Fix uninit buffer allocated by getname()
Fix uninit errors caused after buffer allocation given to 'de'; by initializing the buffer with zeroes. The fix was found by using KMSAN.
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Compensating control
Initialize the buffer allocated by __getname() with zeroes before use to prevent uninitialized-buffer errors in ntfs3.
Event History
Frequently Asked Questions
What is the severity of CVE-2025-68727?
CVE-2025-68727 has a medium severity rating due to the potential for uninitialized memory usage.
How do I fix CVE-2025-68727?
To fix CVE-2025-68727, ensure your Linux kernel is updated to the latest version that contains the patch addressing this vulnerability.
What systems are affected by CVE-2025-68727?
CVE-2025-68727 affects the Linux kernel, specifically the NTFS3 file system implementation.
What type of vulnerability is CVE-2025-68727?
CVE-2025-68727 is an uninitialized memory read vulnerability that can lead to undefined behavior.
When was CVE-2025-68727 published?
CVE-2025-68727 was published in 2025 as part of the Linux kernel security updates.