CVE-2025-71267: fs: ntfs3: fix infinite loop triggered by zero-sized ATTR_LIST
Published Mar 18, 2026
·Updated
fs: ntfs3: fix infinite loop triggered by zero-sized ATTRLIST
Affected Software
8 affected componentsFixes available
Linux Linux kernel
Microsoft azl3 kernel 6.6.126.1-1
Linux Linux kernel>=5.15<5.15.202
Linux Linux kernel>=5.16<6.1.165
Linux Linux kernel>=6.2<6.6.128
Linux Linux kernel>=6.7<6.12.75
Linux Linux kernel>=6.13<6.18.16
Linux Linux kernel>=6.19<6.19.6
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade
Linux kernel (ntfs3)to a version that resolves this vulnerability.Patch fs: ntfs3: fix infinite loop triggered by zero-sized ATTR_LIST
Event History
Mar 18, 2026
CVE Published
via MITRE·10:05 AM
Data Sourced
via MITRE·10:05 AM
Description
Data Sourced
via NVD·11:16 AM
RemedyDescriptionSeverityWeaknessAffected Software
Mar 19, 2026
Data Sourced
via Microsoft·08:03 AM
DescriptionSeverityWeaknessAffected Software
Updated
via Microsoft·08:03 AM
DescriptionSeverity
Frequently Asked Questions
1
What is the severity of CVE-2025-71267?
CVE-2025-71267 has been classified with a severity level that indicates it can lead to Denial-of-Service conditions.
2
How do I fix CVE-2025-71267?
To fix CVE-2025-71267, users should update the Linux kernel to the latest patched version.
3
What does CVE-2025-71267 affect?
CVE-2025-71267 specifically affects the ntfs3 file system within the Linux kernel.
4
What is the nature of the vulnerability in CVE-2025-71267?
CVE-2025-71267 is an infinite loop vulnerability triggered by a zero-sized ATTR_LIST.
5
Can CVE-2025-71267 lead to system crashes?
Yes, CVE-2025-71267 can cause a Denial-of-Service condition, potentially leading to system crashes.