PT-2025-52901 · Linux+3 · Linux Kernel+3

Published

2025-12-24

·

Updated

2026-05-26

·

CVE-2025-68365

CVSS v3.1

5.5

Medium

VectorAV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
Name of the Vulnerable Software and Affected Versions Linux Kernel (affected versions not specified)
Description The Linux kernel’s NTFS3 filesystem component contains a flaw where allocated memory is not initialized before use. This issue is identified through Kernel Memory Sanitizer (KMSAN) reports, specifically detecting uninitialized values in the ntfs read hdr and bcmp functions. The root cause is the use of kmem cache alloc() instead of kmem cache zalloc() for memory allocation, leading to memory being used without proper clearing.
Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Exploit

Use of Uninitialized Resource

Weakness Enumeration

CWE-908

Related Identifiers

AZL-78410
CVE-2025-68365
ECHO-C1C4-D37B-FB32
OPENSUSE-SU-2026:10039-1
OPENSUSE-SU-2026:10301-1
SUSE-SU-2026:0447-1
SUSE-SU-2026:0472-1
SUSE-SU-2026:0587-1
SUSE-SU-2026:20477-1
SUSE-SU-2026:20498-1
SUSE-SU-2026:20845-1
SUSE-SU-2026:20876-1
USN-8162-1
USN-8177-1
USN-8177-2
USN-8180-1
USN-8180-2
USN-8180-3
USN-8180-4
USN-8180-5
USN-8180-6
USN-8183-1
USN-8183-2
USN-8186-1
USN-8187-1
USN-8188-1
USN-8243-1
USN-8245-1
USN-8257-1
USN-8275-1
USN-8278-1
USN-8278-2
USN-8289-1
USN-8289-2
USN-8296-1
USN-8296-2
USN-8297-1

Affected Products

Debian
Linux Kernel
Linuxmint
Ubuntu