CVE-2025-71266: fs: ntfs3: check return value of indx_find to avoid infinite loop
Published Mar 18, 2026
·Updated
fs: ntfs3: check return value of indxfind to avoid infinite loop
Affected Software
9 affected componentsFixes available
Linux Linux kernel
Microsoft azl3 kernel 6.6.126.1-1
Linux Linux kernel>=5.15.1<5.15.202
Linux Linux kernel>=5.16<6.1.165
Linux Linux kernel>=6.2<6.6.128
Linux Linux kernel>=6.7<6.12.75
Linux Linux kernel>=6.13<6.18.16
Linux Linux kernel>=6.19<6.19.6
Linux Linux kernel=5.15
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade
Linux kernel (fs: ntfs3)to a version that resolves this vulnerability.Patch fs: ntfs3: check return value of indx_find to avoid infinite loop
Event History
Mar 18, 2026
CVE Published
via MITRE·10:05 AM
Data Sourced
via MITRE·10:05 AM
Description
Data Sourced
via NVD·11:16 AM
RemedyDescriptionSeverityWeaknessAffected Software
Mar 19, 2026
Data Sourced
via Microsoft·08:03 AM
DescriptionSeverityWeaknessAffected Software
Updated
via Microsoft·08:03 AM
DescriptionSeverity
Frequently Asked Questions
1
What is the severity of CVE-2025-71266?
The severity of CVE-2025-71266 is classified as a Denial-of-Service (DoS) vulnerability.
2
How do I fix CVE-2025-71266?
To fix CVE-2025-71266, ensure you update your Linux kernel to a version that addresses this vulnerability.
3
What components are affected by CVE-2025-71266?
CVE-2025-71266 specifically affects the ntfs3 file system in the Linux kernel.
4
What happens if CVE-2025-71266 is exploited?
If CVE-2025-71266 is exploited, it can lead to an infinite loop causing a Denial-of-Service condition.
5
Who is affected by CVE-2025-71266?
Any users running vulnerable versions of the Linux kernel that utilize the ntfs3 file system are affected by CVE-2025-71266.