{"id":"CVE-2025-71311","title":"In the Linux kernel, the following vulnerability has been resolved:\n\nfs/ntfs3: Initialize new folios before use\n\nKMSAN reports an uninitialized value in longest_match_std(), invoked\nfrom ntfs_compress_write()","summary":"In the Linux kernel, the following vulnerability has been resolved:\n\nfs/ntfs3: Initialize new folios before use\n\nKMSAN reports an uninitialized value in longest_match_std(), invoked\nfrom ntfs_compress_write(). When new folios are allocat…","severity":"high","cvss":8.2,"cvssVector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:L/A:N","cwe":["CWE-908"],"vendor":"linux","product":"linux_kernel","affected":["linux_kernel >= 6.11, < 6.12.75","linux_kernel >= 6.13, < 6.18.14","linux_kernel >= 6.19, < 6.19.4"],"patched":["linux_kernel 6.19.4"],"published":"2026-05-27","updated":"2026-10-14","sourceUpdated":"2026-10-14T13:10:00.187","source":"NVD","sourceUrl":"https://nvd.nist.gov/vuln/detail/CVE-2025-71311","references":[{"url":"https://git.kernel.org/stable/c/41d79f8e2a36622d148719bf7c18b46ac1264284","label":"416baaa9-dc9f-4396-8d5f-8c081fb06d67"},{"url":"https://git.kernel.org/stable/c/5a30cc03bde169ad558695b26da6ea7e55f6194a","label":"416baaa9-dc9f-4396-8d5f-8c081fb06d67"},{"url":"https://git.kernel.org/stable/c/dd6c81527d097b3b0bf5a15c2fdc9657d045144c","label":"416baaa9-dc9f-4396-8d5f-8c081fb06d67"},{"url":"https://git.kernel.org/stable/c/f223ebffa185cc8da934333c5a31ff2d4f992dc9","label":"416baaa9-dc9f-4396-8d5f-8c081fb06d67"}],"tags":["nvd"],"epss":0.00323,"epssPercentile":0.23594,"ingestedAt":"2026-10-14T13:30:58.506Z","slug":"CVE-2025-71311","body":"## Overview\n\nIn the Linux kernel, the following vulnerability has been resolved:\n\nfs/ntfs3: Initialize new folios before use\n\nKMSAN reports an uninitialized value in longest_match_std(), invoked\nfrom ntfs_compress_write(). When new folios are allocated without being\nmarked uptodate and ni_read_frame() is skipped because the caller expects\nthe frame to be completely overwritten, some reserved folios may remain\nonly partially filled, leaving the rest memory uninitialized.\n\n## Affected\n\n- `linux_kernel >= 6.11, < 6.12.75`\n- `linux_kernel >= 6.13, < 6.18.14`\n- `linux_kernel >= 6.19, < 6.19.4`\n\n## Remediation\n\nUpgrade past the affected range:\n\n- `linux_kernel 6.19.4`","depth":"twilight","depthScore":45,"depthScoreParts":{"impact":45.1,"likelihood":0.1,"exploitation":0,"ransomware":0},"changes":[]}