CVE-2025-68727
Published: December 27, 2025Last modified: December 27, 2025
Description
In the Linux kernel, the following vulnerability has been resolved: ntfs3: Fix uninit buffer allocated by __getname() Fix uninit errors caused after buffer allocation given to 'de'; by initializing the buffer with zeroes. The fix was found by using KMSAN.
Status
| Product | Release | Package | Status |
|---|---|---|---|
| Alpaquita Linux | 23 LTS | linux-lts | Fixed (6.1.161-r0) |
| 25 LTS | linux-lts | Fixed (6.12.65-r0) | |
| Stream | linux-lts | Fixed (6.12.63-r0) |
References
- https://git.kernel.org/stable/c/4b1fd82848fdf0e01b3320815b261006c1722c3e
- https://git.kernel.org/stable/c/53f4d6cb97096590410f3719f75cdf9fc5120f37
- https://git.kernel.org/stable/c/90e23db1a85956026999c18e76f402542cb004da
- https://git.kernel.org/stable/c/9948dcb2f7b5a1bf8e8710eafaf6016e00be3ad6
- https://git.kernel.org/stable/c/b40a4eb4a0543d49686a6e693745009dac3b86a9
- https://git.kernel.org/stable/c/d88d4b455b6794f48d7adad52593f1700c7bd50e
- https://git.kernel.org/stable/c/dcb5e3cd96b77d52bb65988e4c914636a6d4fdd9