Not yet scoredPublished Dec 24, 2025

CVE-2025-68727ntfs3: Fix uninit buffer allocated by __getname()

Updated under an hour ago (Oct 28, 2026, 5:00 PM ET)

Does this affect you?

It affects Linux. Add what you run to find out whether that includes you.

No exploitation reported and no EPSS estimate yet.

Do this next

Start free and add your stack

Free account, 1 product

Every CVE for Linux

Exploited in the last 30 days

In the Linux kernel, the following vulnerability has been resolved: ntfs3: Fix uninit buffer allocated by __getname() Fix uninit errors caused after buffer allocation given to 'de'; by initializing the buffer with zeroes. The fix was found by using KMSAN.

CVSS: Not yet scored
Weakness (CWE): Not given
Known exploited: Not in CISA's KEV catalog
EPSS (exploitation in the next 30 days): Not loaded for this CVE
Assigned by: Linux
NVD analysis: Deferred
Record last updated: May 11, 2026
First seen by InfoSec Signals: Oct 9, 2026

Affected products

Affected products

Linux Linux linux:linux (from the name)	from 78ab59fee07f22464f32eafebab2bd97ba94ff2d before 90e23db1a85956026999c18e76f402542cb004da; 78ab59fee07f22464f32eafebab2bd97ba94ff2d builds before 53f4d6cb97096590410f3719f75cdf9fc5120f37; from 78ab59fee07f22464f32eafebab2bd97ba94ff2d before dcb5e3cd96b77d52bb65988e4c914636a6d4fdd9; 78ab59fee07f22464f32eafebab2bd97ba94ff2d builds before 4b1fd82848fdf0e01b3320815b261006c1722c3e; from 78ab59fee07f22464f32eafebab2bd97ba94ff2d before d88d4b455b6794f48d7adad52593f1700c7bd50e; from 78ab59fee07f22464f32eafebab2bd97ba94ff2d before b40a4eb4a0543d49686a6e693745009dac3b86a9; from 78ab59fee07f22464f32eafebab2bd97ba94ff2d before 9948dcb2f7b5a1bf8e8710eafaf6016e00be3ad6	CNA record

References

References

https://git.kernel.org/stable/c/90e23db1a85956026999c18e76f402542cb004da
https://git.kernel.org/stable/c/53f4d6cb97096590410f3719f75cdf9fc5120f37
https://git.kernel.org/stable/c/dcb5e3cd96b77d52bb65988e4c914636a6d4fdd9
https://git.kernel.org/stable/c/4b1fd82848fdf0e01b3320815b261006c1722c3e
https://git.kernel.org/stable/c/d88d4b455b6794f48d7adad52593f1700c7bd50e
https://git.kernel.org/stable/c/b40a4eb4a0543d49686a6e693745009dac3b86a9
https://git.kernel.org/stable/c/9948dcb2f7b5a1bf8e8710eafaf6016e00be3ad6

The CVE record on cve.org NVD's entry

The CVE record is authoritative. Products marked “from the name” were identified from the CNA's free-text names, not a CPE, and are matched less certainly. This product uses the NVD API but is not endorsed or certified by the NVD.