PT-2025-27752 · Linux+5 · Linux Kernel+5

Published

2025-03-18

·

Updated

2026-04-20

·

CVE-2025-38167

CVSS v3.1

5.5

Medium

VectorAV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
Name of the Vulnerable Software and Affected Versions: Linux kernel (affected versions not specified)
Description: A vulnerability in the Linux kernel has been resolved, related to the hdr first de() function in fs/ntfs3. This function returns a pointer to a struct NTFS DE, which may be NULL. To handle this potential error, an error handler has been implemented to manage errors consistently. Error handling for the return value of hdr first de() already exists at other points where this function is called. The issue was found by the Linux Verification Center.
Recommendations: At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Exploit

NULL Pointer Dereference

Weakness Enumeration

CWE-476

Related Identifiers

AZL-64634
BDU:2025-14098
CVE-2025-38167
DLA-4328-1
DSA-5973-1
ECHO-30BF-0C98-938E
MGASA-2025-0218
MGASA-2025-0219
USN-7769-1
USN-7769-2
USN-7769-3
USN-7770-1
USN-7771-1
USN-7774-1
USN-7774-2
USN-7774-3
USN-7774-4
USN-7774-5
USN-7775-1
USN-7775-2
USN-7775-3
USN-7776-1
USN-7789-1
USN-7789-2
USN-8028-1
USN-8028-2
USN-8028-3
USN-8028-4
USN-8028-5
USN-8028-6
USN-8028-7
USN-8028-8
USN-8031-1
USN-8031-2
USN-8031-3
USN-8052-1
USN-8052-2
USN-8074-1
USN-8074-2
USN-8126-1

Affected Products

Astra Linux
Debian
Linuxmint
Linux Kernel
Red Os
Ubuntu