What’s Vulnerable › Vulnerabilities

CVE-2025-68727: ntfs3: Fix uninit buffer allocated by __getname()

• Severity: unknown
• Exploited in the wild: not listed in CISA KEV
• EPSS: 0.2% probability of exploitation in the next 30 days
• Public exploit or detection template: none known
• Published: 2025-12-24 · updated 2026-10-13

Description

In the Linux kernel, the following vulnerability has been resolved: ntfs3: Fix uninit buffer allocated by __getname() Fix uninit errors caused after buffer allocation given to 'de'; by initializing the buffer with zeroes. The fix was found by using KMSAN.

Affected products

• Linux kernel: 5.15 — fixed in 6.19

How to fix

Upgrade to a fixed version: Linux kernel 6.19. Check the vendor advisory for mitigations.

References

• https://git.kernel.org/stable/c/4b1fd82848fdf0e01b3320815b261006c1722c3e
• https://git.kernel.org/stable/c/53f4d6cb97096590410f3719f75cdf9fc5120f37
• https://git.kernel.org/stable/c/90e23db1a85956026999c18e76f402542cb004da
• https://git.kernel.org/stable/c/9948dcb2f7b5a1bf8e8710eafaf6016e00be3ad6
• https://git.kernel.org/stable/c/b40a4eb4a0543d49686a6e693745009dac3b86a9
• https://git.kernel.org/stable/c/d88d4b455b6794f48d7adad52593f1700c7bd50e
• https://git.kernel.org/stable/c/dcb5e3cd96b77d52bb65988e4c914636a6d4fdd9

Get alerted when CVE-2025-68727 or the next vulnerability affects your stack