Bug 2481929 (CVE-2025-71311) - CVE-2025-71311 kernel: fs/ntfs3: Initialize new folios before use
Summary: CVE-2025-71311 kernel: fs/ntfs3: Initialize new folios before use
Keywords:
Status: NEW
Alias: CVE-2025-71311
Product: Security Response
Classification: Other
Component: vulnerability
Version: unspecified
Hardware: All
OS: Linux
unspecified
unspecified
Target Milestone: ---
Assignee: Product Security
QA Contact:
URL:
Whiteboard:
Depends On:
Blocks:
TreeView+ depends on / blocked
 
Reported: 2026-05-27 15:02 UTC by OSIDB Bzimport
Modified: 2026-05-28 20:14 UTC (History)
2 users (show)

Fixed In Version:
Clone Of:
Environment:
Last Closed:
Embargoed:


Attachments (Terms of Use)

Description OSIDB Bzimport 2026-05-27 15:02:51 UTC
In the Linux kernel, the following vulnerability has been resolved:

fs/ntfs3: Initialize new folios before use

KMSAN reports an uninitialized value in longest_match_std(), invoked
from ntfs_compress_write(). When new folios are allocated without being
marked uptodate and ni_read_frame() is skipped because the caller expects
the frame to be completely overwritten, some reserved folios may remain
only partially filled, leaving the rest memory uninitialized.


Note You need to log in before you can comment on or make changes to this bug.