CVE-2025-71265: fs: ntfs3: fix infinite loop in attr_load_runs_range on inconsistent metadata
fs: ntfs3: fix infinite loop in attrloadrunsrange on inconsistent metadata
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade
Linux kernel (ntfs3)to a version that resolves this vulnerability.Fixed in resolvedPatch fs: ntfs3: fix infinite loop in attr_load_runs_range on inconsistent metadata - Configuration
Apply the ntfs3 patch that adds a retry counter so attr_load_runs_range() detects repeated run_lookup_entry() failures and prevents the infinite loop on inconsistent metadata.
Linux kernel ntfs3 retry counter for run_lookup_entry() failures = enabled - Compensating control
Mitigate DoS impact by restricting access/usage of NTFS3 volumes until the patched kernel is deployed.
Event History
Frequently Asked Questions
What is the severity of CVE-2025-71265?
CVE-2025-71265 has been classified as a moderate severity vulnerability due to the potential for causing an infinite loop in the ntfs3 file system.
How do I fix CVE-2025-71265?
To fix CVE-2025-71265, you should update your Linux kernel to the latest patched version that addresses this vulnerability.
What systems are affected by CVE-2025-71265?
CVE-2025-71265 affects the ntfs3 file system implemented in the Linux kernel.
Can CVE-2025-71265 cause data loss?
CVE-2025-71265 can potentially lead to system instability, and while it doesn't directly cause data loss, it can interfere with file system operations.
Is CVE-2025-71265 exploited in the wild?
As of now, there have been no reported exploits of CVE-2025-71265 in the wild, but it is advisable to apply the update to prevent potential risks.