CVE-2025-68365

  1. OpenCVE
  2. Vulnerabilities (CVE)
  3. CVE-2025-68365
In the Linux kernel, the following vulnerability has been resolved: fs/ntfs3: Initialize allocated memory before use KMSAN reports: Multiple uninitialized values detected: - KMSAN: uninit-value in ntfs_read_hdr (3) - KMSAN: uninit-value in bcmp (3) Memory is allocated by __getname(), which is a wrapper for kmem_cache_alloc(). This memory is used before being properly cleared. Change kmem_cache_alloc() to kmem_cache_zalloc() to properly allocate and clear memory before use.

5.5 /10

CVSS v3 : MEDIUM

V3 Legend

Vector :

Exploitability : 1.8 / Impact : 3.6

Attack Vector LOCAL

Attack Complexity LOW

Privileges Required LOW

User Interaction NONE

Confidentiality Impact NONE

Integrity Impact NONE

Availability Impact HIGH

Scope UNCHANGED

References
Link Resource
https://git.kernel.org/stable/c/192e8ce302f14ac66259231dd10cede19858d742 Patch
https://git.kernel.org/stable/c/7d52c592cf53f5bb7163967edc01d2d7d80de44a Patch
https://git.kernel.org/stable/c/a58e29849aef8d26554a982989a2190b49aaf8ed Patch
https://git.kernel.org/stable/c/a8a3ca23bbd9d849308a7921a049330dc6c91398 Patch
https://git.kernel.org/stable/c/bdf38063fd15f2fc7361dc0b5d3c259741eab835 Patch
https://git.kernel.org/stable/c/f7728057220cabd720e27e46097edad48e5bd728 Patch
Configurations

Configuration 1 (hide)

OR cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
History

26 Feb 2026, 18:44

Type Values Removed Values Added
CWE CWE-908
First Time Linux
Linux linux Kernel
CPE cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
CVSS v2 : unknown
v3 : unknown 		v2 : unknown
v3 : 5.5
References () https://git.kernel.org/stable/c/192e8ce302f14ac66259231dd10cede19858d742 - () https://git.kernel.org/stable/c/192e8ce302f14ac66259231dd10cede19858d742 - Patch
References () https://git.kernel.org/stable/c/7d52c592cf53f5bb7163967edc01d2d7d80de44a - () https://git.kernel.org/stable/c/7d52c592cf53f5bb7163967edc01d2d7d80de44a - Patch
References () https://git.kernel.org/stable/c/a58e29849aef8d26554a982989a2190b49aaf8ed - () https://git.kernel.org/stable/c/a58e29849aef8d26554a982989a2190b49aaf8ed - Patch
References () https://git.kernel.org/stable/c/a8a3ca23bbd9d849308a7921a049330dc6c91398 - () https://git.kernel.org/stable/c/a8a3ca23bbd9d849308a7921a049330dc6c91398 - Patch
References () https://git.kernel.org/stable/c/bdf38063fd15f2fc7361dc0b5d3c259741eab835 - () https://git.kernel.org/stable/c/bdf38063fd15f2fc7361dc0b5d3c259741eab835 - Patch
References () https://git.kernel.org/stable/c/f7728057220cabd720e27e46097edad48e5bd728 - () https://git.kernel.org/stable/c/f7728057220cabd720e27e46097edad48e5bd728 - Patch

06 Feb 2026, 17:16

Type Values Removed Values Added
References
  • () https://git.kernel.org/stable/c/a58e29849aef8d26554a982989a2190b49aaf8ed -
  • () https://git.kernel.org/stable/c/bdf38063fd15f2fc7361dc0b5d3c259741eab835 -

30 Jan 2026, 10:15

Type Values Removed Values Added
References
  • () https://git.kernel.org/stable/c/7d52c592cf53f5bb7163967edc01d2d7d80de44a -
  • () https://git.kernel.org/stable/c/f7728057220cabd720e27e46097edad48e5bd728 -

24 Dec 2025, 11:16

Type Values Removed Values Added
New CVE
Information

Published : 2025-12-24 11:16

Updated : 2026-02-26 18:44

NVD link : CVE-2025-68365

Mitre link : CVE-2025-68365

CVE.ORG link : CVE-2025-68365

JSON object : View

Products Affected

linux

  • linux_kernel
CWE
CWE-908

Use of Uninitialized Resource