PT-2026-43693 · Linux · Linux

Published 2026-05-27 · Updated 2026-05-27 · CVE-2025-71311

Mitre

In the Linux kernel, the following vulnerability has been resolved:

fs/ntfs3: Initialize new folios before use

KMSAN reports an uninitialized value in longest match std(), invoked from ntfs compress write(). When new folios are allocated without being marked uptodate and ni read frame() is skipped because the caller expects the frame to be completely overwritten, some reserved folios may remain only partially filled, leaving the rest memory uninitialized.

Related Identifiers

CVE-2025-71311

Affected Products

Linux

References · 5

• https://nvd.nist.gov/vuln/detail/CVE-2025-71311 · Security Note
• https://git.kernel.org/stable/c/dd6c81527d097b3b0bf5a15c2fdc9657d045144c · Note
• https://git.kernel.org/stable/c/f223ebffa185cc8da934333c5a31ff2d4f992dc9 · Note
• https://git.kernel.org/stable/c/5a30cc03bde169ad558695b26da6ea7e55f6194a · Note
• https://git.kernel.org/stable/c/41d79f8e2a36622d148719bf7c18b46ac1264284 · Note