github - ghsa-c243-x575-hcmp

ghsa-c243-x575-hcmp

Vulnerability from github

Published

2025-12-24 12:30

Modified

2025-12-24 12:30

Details

In the Linux kernel, the following vulnerability has been resolved:

ntfs3: Fix uninit buffer allocated by __getname()

Fix uninit errors caused after buffer allocation given to 'de'; by initializing the buffer with zeroes. The fix was found by using KMSAN.

Show details on source website

To clipboard

{
  "affected": [],
  "aliases": [
    "CVE-2025-68727"
  ],
  "database_specific": {
    "cwe_ids": [],
    "github_reviewed": false,
    "github_reviewed_at": null,
    "nvd_published_at": "2025-12-24T11:16:02Z",
    "severity": null
  },
  "details": "In the Linux kernel, the following vulnerability has been resolved:\n\nntfs3: Fix uninit buffer allocated by __getname()\n\nFix uninit errors caused after buffer allocation given to \u0027de\u0027; by\ninitializing the buffer with zeroes. The fix was found by using KMSAN.",
  "id": "GHSA-c243-x575-hcmp",
  "modified": "2025-12-24T12:30:30Z",
  "published": "2025-12-24T12:30:30Z",
  "references": [
    {
      "type": "ADVISORY",
      "url": "https://nvd.nist.gov/vuln/detail/CVE-2025-68727"
    },
    {
      "type": "WEB",
      "url": "https://git.kernel.org/stable/c/4b1fd82848fdf0e01b3320815b261006c1722c3e"
    },
    {
      "type": "WEB",
      "url": "https://git.kernel.org/stable/c/9948dcb2f7b5a1bf8e8710eafaf6016e00be3ad6"
    },
    {
      "type": "WEB",
      "url": "https://git.kernel.org/stable/c/b40a4eb4a0543d49686a6e693745009dac3b86a9"
    },
    {
      "type": "WEB",
      "url": "https://git.kernel.org/stable/c/d88d4b455b6794f48d7adad52593f1700c7bd50e"
    }
  ],
  "schema_version": "1.4.0",
  "severity": []
}

CVE-2025-68727 (GCVE-0-2025-68727)

Vulnerability from cvelistv5

Published

2025-12-24 10:33

Modified

2025-12-24 10:33

Severity ?

Summary

In the Linux kernel, the following vulnerability has been resolved: ntfs3: Fix uninit buffer allocated by __getname() Fix uninit errors caused after buffer allocation given to 'de'; by initializing the buffer with zeroes. The fix was found by using KMSAN.

References

URL

Tags

	https://git.kernel.org/stable/c/4b1fd82848fdf0e01b3320815b261006c1722c3e
	https://git.kernel.org/stable/c/d88d4b455b6794f48d7adad52593f1700c7bd50e
	https://git.kernel.org/stable/c/b40a4eb4a0543d49686a6e693745009dac3b86a9
	https://git.kernel.org/stable/c/9948dcb2f7b5a1bf8e8710eafaf6016e00be3ad6

Impacted products

Vendor

Product

Version

Version: 78ab59fee07f22464f32eafebab2bd97ba94ff2d
Version: 78ab59fee07f22464f32eafebab2bd97ba94ff2d
Version: 78ab59fee07f22464f32eafebab2bd97ba94ff2d
Version: 78ab59fee07f22464f32eafebab2bd97ba94ff2d

Version: 5.15

Show details on NVD website

To clipboard

{
  "containers": {
    "cna": {
      "affected": [
        {
          "defaultStatus": "unaffected",
          "product": "Linux",
          "programFiles": [
            "fs/ntfs3/inode.c"
          ],
          "repo": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git",
          "vendor": "Linux",
          "versions": [
            {
              "lessThan": "4b1fd82848fdf0e01b3320815b261006c1722c3e",
              "status": "affected",
              "version": "78ab59fee07f22464f32eafebab2bd97ba94ff2d",
              "versionType": "git"
            },
            {
              "lessThan": "d88d4b455b6794f48d7adad52593f1700c7bd50e",
              "status": "affected",
              "version": "78ab59fee07f22464f32eafebab2bd97ba94ff2d",
              "versionType": "git"
            },
            {
              "lessThan": "b40a4eb4a0543d49686a6e693745009dac3b86a9",
              "status": "affected",
              "version": "78ab59fee07f22464f32eafebab2bd97ba94ff2d",
              "versionType": "git"
            },
            {
              "lessThan": "9948dcb2f7b5a1bf8e8710eafaf6016e00be3ad6",
              "status": "affected",
              "version": "78ab59fee07f22464f32eafebab2bd97ba94ff2d",
              "versionType": "git"
            }
          ]
        },
        {
          "defaultStatus": "affected",
          "product": "Linux",
          "programFiles": [
            "fs/ntfs3/inode.c"
          ],
          "repo": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git",
          "vendor": "Linux",
          "versions": [
            {
              "status": "affected",
              "version": "5.15"
            },
            {
              "lessThan": "5.15",
              "status": "unaffected",
              "version": "0",
              "versionType": "semver"
            },
            {
              "lessThanOrEqual": "6.12.*",
              "status": "unaffected",
              "version": "6.12.63",
              "versionType": "semver"
            },
            {
              "lessThanOrEqual": "6.17.*",
              "status": "unaffected",
              "version": "6.17.13",
              "versionType": "semver"
            },
            {
              "lessThanOrEqual": "6.18.*",
              "status": "unaffected",
              "version": "6.18.2",
              "versionType": "semver"
            },
            {
              "lessThanOrEqual": "*",
              "status": "unaffected",
              "version": "6.19-rc1",
              "versionType": "original_commit_for_fix"
            }
          ]
        }
      ],
      "cpeApplicability": [
        {
          "nodes": [
            {
              "cpeMatch": [
                {
                  "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
                  "versionEndExcluding": "6.12.63",
                  "versionStartIncluding": "5.15",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
                  "versionEndExcluding": "6.17.13",
                  "versionStartIncluding": "5.15",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
                  "versionEndExcluding": "6.18.2",
                  "versionStartIncluding": "5.15",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
                  "versionEndExcluding": "6.19-rc1",
                  "versionStartIncluding": "5.15",
                  "vulnerable": true
                }
              ],
              "negate": false,
              "operator": "OR"
            }
          ]
        }
      ],
      "descriptions": [
        {
          "lang": "en",
          "value": "In the Linux kernel, the following vulnerability has been resolved:\n\nntfs3: Fix uninit buffer allocated by __getname()\n\nFix uninit errors caused after buffer allocation given to \u0027de\u0027; by\ninitializing the buffer with zeroes. The fix was found by using KMSAN."
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2025-12-24T10:33:11.085Z",
        "orgId": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
        "shortName": "Linux"
      },
      "references": [
        {
          "url": "https://git.kernel.org/stable/c/4b1fd82848fdf0e01b3320815b261006c1722c3e"
        },
        {
          "url": "https://git.kernel.org/stable/c/d88d4b455b6794f48d7adad52593f1700c7bd50e"
        },
        {
          "url": "https://git.kernel.org/stable/c/b40a4eb4a0543d49686a6e693745009dac3b86a9"
        },
        {
          "url": "https://git.kernel.org/stable/c/9948dcb2f7b5a1bf8e8710eafaf6016e00be3ad6"
        }
      ],
      "title": "ntfs3: Fix uninit buffer allocated by __getname()",
      "x_generator": {
        "engine": "bippy-1.2.0"
      }
    }
  },
  "cveMetadata": {
    "assignerOrgId": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
    "assignerShortName": "Linux",
    "cveId": "CVE-2025-68727",
    "datePublished": "2025-12-24T10:33:11.085Z",
    "dateReserved": "2025-12-24T10:30:51.028Z",
    "dateUpdated": "2025-12-24T10:33:11.085Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.2"
}

Log in or create an account to share your comment.

Tags

Taxonomy of the tags.

All sightings related to this event Export sightings related to this event

Sightings

Author	Source	Type	Date

Nomenclature

Seen: The vulnerability was mentioned, discussed, or seen somewhere by the user.
Confirmed: The vulnerability is confirmed from an analyst perspective.
Published Proof of Concept: A public proof of concept is available for this vulnerability.
Exploited: This vulnerability was exploited and seen by the user reporting the sighting.
Patched: This vulnerability was successfully patched by the user reporting the sighting.
Not exploited: This vulnerability was not exploited or seen by the user reporting the sighting.
Not confirmed: The user expresses doubt about the veracity of the vulnerability.
Not patched: This vulnerability was not successfully patched by the user reporting the sighting.